ThawteTLSRSACAG1.crt: CN=Thawte TLS RSA CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2027-11-02) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: https://cacerts.digicert.com/ThawteTLSRSACAG1.crt (in DER format )
Serial Number : 12040465313876659785052849460202981463
SHA-1 Fingerprint : c9fefc763d9548b487696f047acba0abe45c7bc1
SHA-1 Fingerprint : c9:fe:fc:76:3d:95:48:b4:87:69:6f:04:7a:cb:a0:ab:e4:5c:7b:c1
SHA-256 Fingerprint : 4bcc5e234fe81ede4eaf883aa19c31335b0b26e85e066b9945e4cb6153eb20c2
SHA-256 Fingerprint : 4b:cc:5e:23:4f:e8:1e:de:4e:af:88:3a:a1:9c:31:33:5b:0b:26:e8:5e:06:6b:99:45:e4:cb:61:53:eb:20:c2
Signature Hash Algorithm : sha256
Subject : CN=Thawte TLS RSA CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US
- Country Name: US (United States of America)
- Organization: DigiCert Inc
- Organization Unit: www.digicert.com
- Common Name: Thawte TLS RSA CA G1
Not Valid Before: 2017-11-02 12:24:25
Not Valid After: 2027-11-02 12:24:25
Issuer (Parent Certificate):
- Issuer Name: CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: Unknown
- No public standard audit information was found by E2Encrypted.com. We update this information regularly, check back later.
- Check its issuer’s audit information: CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US .

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/ThawteTLSRSACAG1.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/ThawteTLSRSACAG1.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0e:e8:c5:de:5b:fa:62:d2:ae:2f:f7:09:7c:48:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
        Validity
            Not Before: Nov  2 12:24:25 2017 GMT
            Not After : Nov  2 12:24:25 2027 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Thawte TLS RSA CA G1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:e0:98:f8:55:7a:d0:b4:6f:fa:33:6d:82:
                    5d:cc:e0:54:03:5b:0c:a2:0e:3b:d3:7d:1c:00:ff:
                    8f:db:70:0d:50:df:20:ad:71:02:2f:c3:61:0c:41:
                    78:17:54:7d:b4:bd:30:63:49:9c:cc:76:91:d1:ae:
                    e5:61:a9:e5:c6:dc:16:a3:5b:36:b8:69:e7:c8:3b:
                    3a:98:e0:ac:eb:a7:b0:db:0d:d8:11:3a:fa:4d:bd:
                    78:c6:08:e9:bb:58:06:16:d0:1e:7b:06:a2:90:ef:
                    45:b9:df:21:c4:62:53:4b:09:fc:c5:e3:64:7c:a5:
                    56:a4:3d:8b:e2:f1:4d:df:a1:4d:83:17:a2:94:ae:
                    9a:13:8c:a4:80:60:33:36:5a:24:4e:9e:a1:34:e2:
                    c0:62:90:f2:49:d2:c0:3c:ac:ee:25:24:3b:24:21:
                    19:e8:ef:92:0c:ac:b0:21:d5:cb:a0:c4:e7:a7:1b:
                    81:28:64:86:f3:c3:56:4e:8d:c2:1c:23:86:99:01:
                    02:89:ad:b2:a9:d3:c3:8e:02:ea:9c:48:98:36:3c:
                    10:2f:cb:8c:aa:3f:2b:3a:f9:4c:82:f8:81:70:70:
                    3b:c6:dc:be:ef:fb:98:2c:de:99:4b:b5:6a:d7:f1:
                    7f:95:58:55:39:fe:5e:8f:a8:d9:76:60:7c:e6:cc:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A5:8C:FE:32:CC:EB:0F:2C:D4:19:C6:08:B8:00:24:88:5D:C3:C5:B7
            X509v3 Authority Key Identifier: 
                keyid:4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: sha256WithRSAEncryption
         ba:92:6d:0a:03:8b:13:6f:65:58:a4:40:66:fe:e2:f6:1c:bf:
         e9:65:7f:41:ec:bf:e1:6c:9e:0d:72:80:5e:ed:5e:7a:a0:29:
         ed:ed:a7:88:a3:cb:0c:8c:24:56:4c:25:99:0f:57:58:d3:ed:
         8a:64:e0:b5:74:a8:fc:77:55:57:5c:0b:67:8f:2b:43:0e:e3:
         cf:7f:af:e2:a3:0d:26:61:04:ce:fc:60:20:fc:c2:f2:2f:a0:
         83:9b:71:73:0c:1f:15:b6:c1:ff:69:e3:20:3f:aa:60:0f:55:
         d0:ab:3f:a1:68:39:df:9c:94:ca:06:ec:61:72:99:f1:dc:07:
         5b:95:eb:9e:fd:09:cf:7f:58:47:61:af:0b:f9:1b:fc:3e:2e:
         54:87:85:7d:17:01:ce:7e:98:5d:31:73:b1:8b:5e:0e:aa:6b:
         22:4d:b7:39:70:eb:3d:fe:eb:a4:1f:e6:15:b2:e1:5d:59:39:
         da:e8:85:70:d6:a8:7e:b4:4b:72:1f:5e:91:be:68:bb:a6:4a:
         b2:65:85:0b:38:f3:08:13:b6:af:ae:58:d5:54:16:6e:8a:4c:
         00:46:d6:3c:b4:25:55:e8:fa:7d:97:75:5e:6a:00:6a:6f:67:
         df:82:a3:49:b7:70:b4:4d:83:58:40:8f:81:5c:6d:51:d5:c0:
         01:96:89:5d

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates