CloudflareIncECCCA-3.crt: CN=Cloudflare Inc ECC CA-3,O=Cloudflare, Inc.,C=US

Last Updated: 2022-03-26

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

Certificate download URL: http://cacerts.digicert.com/CloudflareIncECCCA-3.crt (DER format)
Serial number: 13580602362388610137601344763287833660
SHA-1 Fingerprint: b3dd7606d2b5a8b4a13771dbecc9ee1cecafa38a
SHA-1 Fingerprint: b3:dd:76:06:d2:b5:a8:b4:a1:37:71:db:ec:c9:ee:1c:ec:af:a3:8a
SHA-256 Fingerprint: 3abbe63daf756c5016b6b85f52015fd8e8acbe277c5087b127a60563a841ed8a
SHA-256 Fingerprint: 3a:bb:e6:3d:af:75:6c:50:16:b6:b8:5f:52:01:5f:d8:e8:ac:be:27:7c:50:87:b1:27:a6:05:63:a8:41:ed:8a
Signature hash algorithm: sha256
Subject: CN=Cloudflare Inc ECC CA-3,O=Cloudflare, Inc.,C=US
Not valid before: 2020-01-27 12:48:08
Not valid after: 2024-12-31 23:59:59
Issuer:
- Issuer name: CN=Baltimore CyberTrust Root,OU=CyberTrust,O=Baltimore,C=IE
- Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacerts.digicert.com/CloudflareIncECCCA-3.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.digicert.com/CloudflareIncECCCA-3.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:37:87:64:5e:5f:b4:8c:22:4e:fd:1b:ed:14:0c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
        Validity
            Not Before: Jan 27 12:48:08 2020 GMT
            Not After : Dec 31 23:59:59 2024 GMT
        Subject: C=US, O=Cloudflare, Inc., CN=Cloudflare Inc ECC CA-3
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:b9:ad:4d:66:99:14:0b:46:ec:1f:81:d1:2a:50:
                    1e:9d:03:15:2f:34:12:7d:2d:96:b8:88:38:9b:85:
                    5f:8f:bf:bb:4d:ef:61:46:c4:c9:73:d4:24:4f:e0:
                    ee:1c:ce:6c:b3:51:71:2f:6a:ee:4c:05:09:77:d3:
                    72:62:a4:9b:d7
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A5:CE:37:EA:EB:B0:75:0E:94:67:88:B4:45:FA:D9:24:10:87:96:1F
            X509v3 Authority Key Identifier: 
                keyid:E5:9D:59:30:82:47:58:CC:AC:FA:08:54:36:86:7B:3A:B5:04:4D:F0

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/Omniroot2025.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.1.1
                  CPS: https://www.digicert.com/CPS
                Policy: 2.16.840.1.114412.1.2
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
                Policy: 2.23.140.1.2.3

    Signature Algorithm: sha256WithRSAEncryption
         05:24:1d:dd:1b:b0:2a:eb:98:d6:85:e3:39:4d:5e:6b:57:9d:
         82:57:fc:eb:e8:31:a2:57:90:65:05:be:16:44:38:5a:77:02:
         b9:cf:10:42:c6:e1:92:a4:e3:45:27:f8:00:47:2c:68:a8:56:
         99:53:54:8f:ad:9e:40:c1:d0:0f:b6:d7:0d:0b:38:48:6c:50:
         2c:49:90:06:5b:64:1d:8b:cc:48:30:2e:de:08:e2:9b:49:22:
         c0:92:0c:11:5e:96:92:94:d5:fc:20:dc:56:6c:e5:92:93:bf:
         7a:1c:c0:37:e3:85:49:15:fa:2b:e1:74:39:18:0f:b7:da:f3:
         a2:57:58:60:4f:cc:8e:94:00:fc:46:7b:34:31:3e:4d:47:82:
         81:3a:cb:f4:89:5d:0e:ef:4d:0d:6e:9c:1b:82:24:dd:32:25:
         5d:11:78:51:10:3d:a0:35:23:04:2f:65:6f:9c:c1:d1:43:d7:
         d0:1e:f3:31:67:59:27:dd:6b:d2:75:09:93:11:24:24:14:cf:
         29:be:e6:23:c3:b8:8f:72:3f:e9:07:c8:24:44:53:7a:b3:b9:
         61:65:a1:4c:0e:c6:48:00:c9:75:63:05:87:70:45:52:83:d3:
         95:9d:45:ea:f0:e8:31:1d:7e:09:1f:0a:fe:3e:dd:aa:3c:5e:
         74:d2:ac:b1

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Basic Information

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates