DigiCertSHA2AssuredIDCA.crt: CN=DigiCert SHA2 Assured ID CA,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2028-11-05) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/DigiCertSHA2AssuredIDCA.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/DigiCertSHA2AssuredIDCA.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ae:79:60:66:66:90:1a:b9:c5:7f:a6:6c:5b:dc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
        Validity
            Not Before: Nov  5 12:00:00 2013 GMT
            Not After : Nov  5 12:00:00 2028 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f8:11:23:3f:6a:b5:ef:c0:27:79:1b:2d:05:
                    87:a2:10:43:31:df:0e:d4:15:1b:4f:77:a4:22:ce:
                    3e:8c:70:f0:be:07:8e:dd:27:2a:bc:01:1d:b6:2c:
                    0a:ca:dd:69:58:1f:41:ed:6a:05:1f:da:63:78:59:
                    1e:22:2c:2b:f8:ba:7e:c9:35:3b:56:f1:1f:7c:42:
                    7e:25:b0:23:19:c6:45:38:d7:3d:44:f9:20:7c:60:
                    ae:1c:b0:5a:18:04:be:8f:3b:f7:a9:f0:94:9a:a6:
                    0c:63:49:b6:41:17:53:40:32:bd:4f:e6:50:7a:50:
                    1f:25:45:e8:f1:89:af:cd:ff:5e:ff:50:f3:f0:17:
                    11:ff:bd:c5:89:f5:bd:62:b9:d8:fb:8e:45:04:85:
                    6d:99:cd:c5:48:4d:fd:26:ab:02:36:45:ea:36:d7:
                    5f:6a:e2:1a:82:41:0a:dc:e9:d9:f5:91:17:8e:c6:
                    21:ad:38:3c:13:e6:1e:7f:66:9c:d5:4d:d9:46:da:
                    f6:cf:52:a7:7d:3b:24:c3:b4:c1:51:35:c6:9b:eb:
                    d4:ef:7e:e4:7b:03:e1:44:bd:7a:0b:37:e0:4f:cb:
                    82:8a:0d:71:18:e4:a6:e0:89:2c:1b:f3:b2:73:3c:
                    c1:b0:92:9e:18:7d:bd:ab:7d:c5:7d:08:a1:2c:c2:
                    9f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, E-mail Protection
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.0.2.4
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: 

            X509v3 Subject Key Identifier: 
                E7:02:23:80:00:4F:D8:D7:BC:94:0B:D9:3F:74:39:49:32:3C:8A:79
            X509v3 Authority Key Identifier: 
                keyid:45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F

    Signature Algorithm: sha256WithRSAEncryption
         4e:d4:89:27:b9:fd:1d:87:77:7e:0f:28:05:90:f1:0a:2f:c9:
         3b:3e:bd:93:9c:90:c6:af:fa:91:51:87:32:54:6b:e8:ca:c1:
         71:51:5c:99:8e:b5:fa:e0:62:19:99:a6:07:9a:7c:13:27:db:
         e5:02:a2:84:12:d9:15:f6:0a:44:57:c4:34:8f:6d:73:1f:3a:
         d6:a0:01:3d:de:e3:82:e4:45:6b:b2:eb:25:fd:80:5e:1d:39:
         90:be:5b:42:f6:ce:91:60:e3:f9:a0:56:0c:48:10:ce:33:68:
         7b:cd:93:ab:f0:6a:cb:4f:58:0f:b9:7b:5d:1b:04:81:9e:a7:
         22:e2:57:49:27:ee:92:93:08:be:69:08:53:02:3a:2e:5d:c8:
         19:f4:50:80:4e:02:d9:b0:5d:91:b4:93:87:f9:96:96:81:55:
         40:8e:66:ed:82:d8:bb:28:5f:ed:4c:61:ed:06:58:28:19:53:
         11:44:bc:47:20:29:b2:04:6c:d8:89:54:99:3b:75:db:67:78:
         2c:1e:92:78:c6:55:3d:58:12:11:32:6e:bd:43:0c:4d:34:db:
         7b:c6:42:db:ec:be:ab:9b:61:4c:06:92:e3:8e:df:21:2a:50:
         57:04:c0:60:a2:35:d5:24:9e:66:37:09:49:cf:d5:f8:65:b3:
         e0:e2:6e:c2

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgIQBK55YGZmkBq5xX+mbFvczTANBgkqhkiG9w0BAQsFADBl
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv
b3QgQ0EwHhcNMTMxMTA1MTIwMDAwWhcNMjgxMTA1MTIwMDAwWjBlMQswCQYDVQQG
EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl
cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBTSEEyIEFzc3VyZWQgSUQgQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc+BEjP2q178AneRstBYeiEEMx
3w7UFRtPd6Qizj6McPC+B47dJyq8AR22LArK3WlYH0HtagUf2mN4WR4iLCv4un7J
NTtW8R98Qn4lsCMZxkU41z1E+SB8YK4csFoYBL6PO/ep8JSapgxjSbZBF1NAMr1P
5lB6UB8lRejxia/N/17/UPPwFxH/vcWJ9b1iudj7jkUEhW2ZzcVITf0mqwI2Reo2
119q4hqCQQrc6dn1kReOxiGtODwT5h5/ZpzVTdlG2vbPUqd9OyTDtMFRNcab69Tv
fuR7A+FEvXoLN+BPy4KKDXEY5KbgiSwb87JzPMGwkp4Yfb2rfcV9CKEswp9zAgMB
AAGjggL4MIIC9DASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBhjA0
BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0
LmNvbTCBgQYDVR0fBHoweDA6oDigNoY0aHR0cDovL2NybDQuZGlnaWNlcnQuY29t
L0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENBLmNybDA6oDigNoY0aHR0cDovL2NybDMu
ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENBLmNybDAdBgNVHSUE
FjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwggGzBgNVHSAEggGqMIIBpjCCAaIGCmCG
SAGG/WwAAgQwggGSMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5j
b20vQ1BTMIIBZAYIKwYBBQUHAgIwggFWHoIBUgBBAG4AeQAgAHUAcwBlACAAbwBm
ACAAdABoAGkAcwAgAEMAZQByAHQAaQBmAGkAYwBhAHQAZQAgAGMAbwBuAHMAdABp
AHQAdQB0AGUAcwAgAGEAYwBjAGUAcAB0AGEAbgBjAGUAIABvAGYAIAB0AGgAZQAg
AEQAaQBnAGkAQwBlAHIAdAAgAEMAUAAvAEMAUABTACAAYQBuAGQAIAB0AGgAZQAg
AFIAZQBsAHkAaQBuAGcAIABQAGEAcgB0AHkAIABBAGcAcgBlAGUAbQBlAG4AdAAg
AHcAaABpAGMAaAAgAGwAaQBtAGkAdAAgAGwAaQBhAGIAaQBsAGkAdAB5ACAAYQBu
AGQAIABhAHIAZQAgAGkAbgBjAG8AcgBwAG8AcgBhAHQAZQBkACAAaABlAHIAZQBp
AG4AIABiAHkAIAByAGUAZgBlAHIAZQBuAGMAZQAuMB0GA1UdDgQWBBTnAiOAAE/Y
17yUC9k/dDlJMjyKeTAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYunpyGd823IDzAN
BgkqhkiG9w0BAQsFAAOCAQEATtSJJ7n9HYd3fg8oBZDxCi/JOz69k5yQxq/6kVGH
MlRr6MrBcVFcmY61+uBiGZmmB5p8Eyfb5QKihBLZFfYKRFfENI9tcx861qABPd7j
guRFa7LrJf2AXh05kL5bQvbOkWDj+aBWDEgQzjNoe82Tq/Bqy09YD7l7XRsEgZ6n
IuJXSSfukpMIvmkIUwI6Ll3IGfRQgE4C2bBdkbSTh/mWloFVQI5m7YLYuyhf7Uxh
7QZYKBlTEUS8RyApsgRs2IlUmTt122d4LB6SeMZVPVgSETJuvUMMTTTbe8ZC2+y+
q5thTAaS447fISpQVwTAYKI11SSeZjcJSc/V+GWz4OJuwg==
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06