DigiCertGlobalCAG2.crt: CN=DigiCert Global CA G2,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2028-08-01) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/DigiCertGlobalCAG2.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/DigiCertGlobalCAG2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8e:e0:c9:0d:6a:89:15:88:04:06:1e:e2:41:f9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
        Validity
            Not Before: Aug  1 12:00:00 2013 GMT
            Not After : Aug  1 12:00:00 2028 GMT
        Subject: C=US, O=DigiCert Inc, CN=DigiCert Global CA G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:48:7c:be:f3:05:86:5d:5b:d5:2f:85:4e:4b:
                    e0:86:ad:15:ac:61:cf:5b:af:3e:6a:0a:47:fb:9a:
                    76:91:60:0b:8a:6b:cd:cf:dc:57:7e:60:98:0b:e4:
                    54:d9:56:ed:21:cc:02:b6:5a:81:5f:97:6a:ee:02:
                    2f:23:27:b8:6d:d4:b0:e7:06:02:78:0b:1f:5c:a9:
                    99:36:fe:bb:ac:1b:05:fa:57:cd:81:10:40:67:d6:
                    30:8b:58:35:d4:96:61:be:d0:8c:7a:97:9f:1a:f9:
                    22:e6:14:2f:a9:c6:e8:01:1f:ab:f8:26:0f:ac:8e:
                    4d:2c:32:39:1d:81:9b:8d:1c:65:b2:1c:db:61:a8:
                    89:2f:60:e7:eb:c2:4a:18:c4:6f:2a:e9:10:92:09:
                    ed:17:d1:00:2b:e6:7d:ef:04:89:14:4e:33:a1:b2:
                    0f:97:87:9f:b3:a0:cd:2f:bc:2c:ec:b8:83:68:31:
                    3d:1f:d5:4a:90:10:19:0b:81:95:d6:29:76:51:f9:
                    36:76:d0:b7:09:7a:38:4a:d7:6f:8c:bf:13:7c:39:
                    ed:ba:ae:90:fc:95:f7:7b:78:09:36:5e:74:93:1e:
                    25:f0:ff:d4:ad:ae:68:6b:c6:ff:0f:d5:35:f1:55:
                    6e:48:49:f8:f8:b8:ef:88:f8:f1:5e:11:77:aa:df:
                    02:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

            X509v3 Subject Key Identifier: 
                24:6E:2B:2D:D0:6A:92:51:51:25:69:01:AA:9A:47:A6:89:E7:40:20
            X509v3 Authority Key Identifier: 
                keyid:4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39

    Signature Algorithm: sha256WithRSAEncryption
         0b:39:84:91:f9:97:eb:aa:81:af:84:e9:5a:38:92:fc:e2:6c:
         59:bf:36:c8:45:a7:31:03:11:e1:06:c0:ac:32:c7:5a:55:29:
         da:4f:40:02:f5:a1:de:b0:ed:de:c0:f8:f6:75:9d:76:b9:87:
         fe:41:80:7a:cf:5d:e3:00:c6:5b:02:e6:9b:78:62:c9:dc:b8:
         62:9a:77:ed:89:08:d7:4b:c5:fd:43:d5:62:23:27:c4:04:59:
         6d:71:3f:23:5b:ea:d9:f2:e7:24:27:6f:f4:95:80:db:96:2c:
         e4:54:8b:cf:ea:19:d9:7f:55:99:51:7a:0e:2d:18:3d:78:58:
         52:bc:63:68:57:0b:dd:44:b3:57:4a:60:e6:c8:70:70:5b:87:
         28:6a:d7:3b:4e:52:45:19:af:24:06:92:48:11:1a:8b:ae:ac:
         18:12:57:ac:03:cb:b8:f4:bd:ca:26:0e:a7:c1:dd:e3:33:ef:
         c0:55:30:0d:95:59:4e:9c:03:36:06:f8:c0:8f:14:99:9c:4d:
         2a:9e:c1:e1:7d:3b:af:72:a7:45:ba:13:96:29:4e:19:d0:1a:
         98:06:f4:37:94:17:ad:a3:18:ba:3e:b0:01:0c:95:d6:29:35:
         20:35:7d:f5:10:60:e4:f7:68:62:1e:ec:19:e1:24:f2:87:11:
         ac:e9:08:80

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIEizCCA3OgAwIBAgIQDI7gyQ1qiRWIBAYe4kH5rzANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
MjAeFw0xMzA4MDExMjAwMDBaFw0yODA4MDExMjAwMDBaMEQxCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxHjAcBgNVBAMTFURpZ2lDZXJ0IEdsb2Jh
bCBDQSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANNIfL7zBYZd
W9UvhU5L4IatFaxhz1uvPmoKR/uadpFgC4przc/cV35gmAvkVNlW7SHMArZagV+X
au4CLyMnuG3UsOcGAngLH1ypmTb+u6wbBfpXzYEQQGfWMItYNdSWYb7QjHqXnxr5
IuYUL6nG6AEfq/gmD6yOTSwyOR2Bm40cZbIc22GoiS9g5+vCShjEbyrpEJIJ7RfR
ACvmfe8EiRROM6GyD5eHn7OgzS+8LOy4g2gxPR/VSpAQGQuBldYpdlH5NnbQtwl6
OErXb4y/E3w57bqukPyV93t4CTZedJMeJfD/1K2uaGvG/w/VNfFVbkhJ+Pi474j4
8V4Rd6rfArMCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8CAQAwDgYDVR0P
AQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29j
c3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6Ly9jcmw0LmRp
Z2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RHMi5jcmwwN6A1oDOGMWh0dHA6
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RHMi5jcmwwPQYD
VR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2lj
ZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFCRuKy3QapJRUSVpAaqaR6aJ50AgMB8GA1Ud
IwQYMBaAFE4iVCAYlebjbuYP+vq5Eu0GF485MA0GCSqGSIb3DQEBCwUAA4IBAQAL
OYSR+ZfrqoGvhOlaOJL84mxZvzbIRacxAxHhBsCsMsdaVSnaT0AC9aHesO3ewPj2
dZ12uYf+QYB6z13jAMZbAuabeGLJ3LhimnftiQjXS8X9Q9ViIyfEBFltcT8jW+rZ
8uckJ2/0lYDblizkVIvP6hnZf1WZUXoOLRg9eFhSvGNoVwvdRLNXSmDmyHBwW4co
atc7TlJFGa8kBpJIERqLrqwYElesA8u49L3KJg6nwd3jM+/AVTANlVlOnAM2BvjA
jxSZnE0qnsHhfTuvcqdFuhOWKU4Z0BqYBvQ3lBetoxi6PrABDJXWKTUgNX31EGDk
92hiHuwZ4STyhxGs6QiA
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06