DigiCertTrustedServerCA.crt: CN=DigiCert Trusted Server CA,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2028-04-18) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/DigiCertTrustedServerCA.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/DigiCertTrustedServerCA.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:85:a6:3e:1e:31:4d:a0:62:2d:23:1e:ac:5d:5a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root CA
        Validity
            Not Before: Apr 18 12:00:00 2013 GMT
            Not After : Apr 18 12:00:00 2028 GMT
        Subject: C=US, O=DigiCert Inc, CN=DigiCert Trusted Server CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6a:a7:45:3f:94:05:b9:ba:d3:b4:98:71:b5:
                    63:1b:44:69:84:9f:df:09:03:c2:37:d2:b4:3f:ab:
                    56:23:0f:00:c9:37:0b:2b:8a:a6:1d:50:cf:4b:1c:
                    12:62:99:2b:82:da:4a:20:31:64:4d:7f:97:04:d4:
                    e3:75:42:2d:51:72:81:f1:26:2a:3f:35:d8:10:91:
                    a9:a5:b4:43:db:e5:43:4b:52:cc:43:78:00:49:dd:
                    c6:f1:db:cb:ab:bf:6e:53:15:da:ec:18:dd:bf:e4:
                    e7:e3:c9:97:05:92:92:81:f3:12:f4:87:fc:2a:e4:
                    6c:53:59:f8:b8:70:5e:33:9e:ab:91:32:6f:a0:cd:
                    26:25:bc:57:48:c7:e2:03:f8:7e:c5:2b:ab:02:aa:
                    d8:8c:46:61:af:33:c6:00:61:fd:6c:e0:7c:7f:22:
                    96:42:c0:5f:b8:2c:44:59:ae:09:04:8b:77:3d:ab:
                    ba:a5:8e:5b:80:d2:87:fa:25:6b:27:9f:5d:33:72:
                    fb:ea:1a:ad:78:c2:de:35:fa:65:0c:b0:50:d3:cb:
                    c8:c1:9c:c6:29:b7:78:cd:6a:1c:2a:08:2a:ed:25:
                    10:75:2f:a5:a4:f2:6c:d7:d1:94:58:5d:20:25:ae:
                    fc:50:ad:24:77:a6:bb:51:ad:06:5d:50:40:b0:cc:
                    6f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertTrustedRootCA.crl

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertTrustedRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

            X509v3 Subject Key Identifier: 
                15:A8:DB:C2:59:C6:77:A4:9D:61:16:8B:00:E3:CC:00:AD:5D:CC:D6
            X509v3 Authority Key Identifier: 
                keyid:31:83:1A:16:22:F6:72:D4:08:86:56:1E:13:AF:91:61:E6:B9:9F:47

    Signature Algorithm: sha256WithRSAEncryption
         28:81:22:0f:4e:be:1a:68:3f:90:0b:72:69:66:d7:2f:b5:0a:
         69:03:5d:09:87:4b:e6:bc:c7:a2:64:ac:19:dc:57:e1:f4:de:
         88:89:59:78:ae:19:44:0e:52:e1:98:e6:89:a5:c4:44:45:fb:
         3d:d0:c1:24:98:db:98:91:c7:74:9d:41:8d:11:51:fd:80:23:
         86:d8:48:08:78:53:a9:5c:d2:9c:e0:5b:52:5a:c7:d3:30:7f:
         b0:fc:7f:93:cf:1e:33:a8:9e:38:77:d6:85:a8:03:4c:f3:03:
         e9:f4:02:f6:34:fd:87:e1:12:b0:69:70:0e:00:8d:27:6c:f0:
         5d:f7:4c:a9:72:18:bc:13:8b:23:88:d9:c6:91:5c:8d:18:70:
         d1:c6:e3:f9:7e:3f:16:51:a1:a7:e8:55:ee:12:0a:77:01:79:
         2b:5f:d3:35:15:80:07:09:37:1e:12:61:84:d4:e2:0d:6c:95:
         52:35:bd:9f:ad:99:7a:43:0c:e1:46:81:a6:bf:ce:ba:ed:17:
         d1:04:cf:ab:b9:2f:f3:6f:0e:96:09:35:e0:d4:bd:77:6f:89:
         e1:56:9e:3a:bb:ee:54:94:38:bb:25:34:87:d2:6d:b2:53:34:
         c7:86:cb:0e:38:27:cb:f3:04:44:ee:35:ad:ee:62:57:b9:53:
         7a:a0:6f:f9

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06