SecureSiteProCAG2.crt: CN=Secure Site Pro CA G2,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2029-06-20) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://crl.digicert-cn.com/SecureSiteProCAG2.crt" --output cert.crt

Download certificate through wget:

wget -q "http://crl.digicert-cn.com/SecureSiteProCAG2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d5:7f:1f:15:5b:bd:e4:cf:84:37:8e:17:f7:9b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Jun 20 12:21:56 2019 GMT
            Not After : Jun 20 12:21:56 2029 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Secure Site Pro CA G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f9:56:76:55:26:1e:0c:a8:73:17:f4:9e:b4:
                    73:b3:b8:1a:6d:7a:bb:1c:0a:f0:e2:a3:fa:8d:29:
                    87:14:88:80:8f:be:ee:b6:35:cb:a0:ce:b3:74:c2:
                    4b:b6:50:32:db:0d:1d:a1:c5:73:0c:b0:ce:18:ff:
                    d8:49:56:91:6e:eb:4b:d0:d3:98:8e:d3:8b:21:5d:
                    85:e8:d3:58:5f:15:22:28:4d:7a:6d:6c:bf:77:da:
                    c5:e4:5b:1a:95:7b:28:35:3e:ca:32:7c:16:66:12:
                    0f:fe:a7:3c:5e:49:ba:ad:1e:8b:6e:72:87:3c:4d:
                    12:c3:52:d3:f8:79:06:ac:19:1a:c9:26:31:24:f0:
                    a2:b1:64:af:a9:3c:79:23:6f:29:75:30:d6:67:69:
                    c5:c5:00:7c:83:27:e1:88:32:1b:e1:ca:9a:01:89:
                    3d:69:38:63:45:5c:86:3b:f7:44:5b:f3:b1:d9:2d:
                    ac:d2:4e:97:69:7c:e8:b4:02:fd:b8:66:2f:4a:5e:
                    b5:ba:67:0e:d4:89:00:37:db:f3:1a:74:51:38:6a:
                    30:2d:54:87:22:67:ee:c7:84:44:03:70:d9:2b:39:
                    73:fc:18:ae:ca:ff:c6:59:4c:2e:72:4b:15:09:d0:
                    6b:3e:74:af:e5:62:7b:a4:bc:81:db:b1:23:82:ae:
                    b1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                45:41:E3:93:54:70:B8:E9:A5:B7:96:BC:26:B1:58:75:42:97:3E:F3
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            Authority Information Access: 
                OCSP - URI:http://ocsp.dcocsp.cn

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.digicert-cn.com/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua

    Signature Algorithm: sha256WithRSAEncryption
         de:77:8e:9d:f0:6b:34:5f:43:17:28:7a:4f:20:55:c6:6f:79:
         39:b8:8a:b2:41:4d:f6:23:c2:d1:b0:83:eb:d7:73:83:b5:28:
         3a:68:92:81:16:5b:52:ab:fc:0c:f0:75:1e:c9:b8:0b:b4:98:
         7c:8a:e3:8f:9c:95:af:1f:ac:99:5d:f1:33:0f:9c:c7:29:a3:
         96:fe:ad:67:68:5a:0a:18:6b:1a:39:d1:35:ca:53:6a:38:0a:
         fa:90:68:a4:04:35:bd:8f:4b:d5:eb:4e:8b:a4:ac:6b:d0:58:
         ca:be:b3:20:39:54:10:f7:40:72:a4:79:e2:d3:c4:2f:63:76:
         b5:87:0f:c7:6c:cf:fb:22:6d:cf:d4:6d:d0:c3:78:46:10:ac:
         fd:e3:08:f3:ad:1f:e3:d6:85:a6:8d:63:3a:56:0c:53:32:03:
         aa:fe:47:ab:9a:23:6f:8a:f0:ff:fd:af:86:7b:c7:7f:33:b2:
         ff:0d:44:0d:24:48:4c:75:b4:53:13:b3:33:82:b9:a7:7e:74:
         e6:90:2e:e1:e5:2b:dc:95:36:61:01:73:ca:2c:ae:a2:05:fa:
         7c:fd:6b:15:ec:4b:65:4b:7d:36:9c:e9:28:24:1c:5c:87:09:
         56:92:9c:1a:5d:15:f7:4d:69:1d:01:ed:1e:52:9f:0e:10:cc:
         52:ad:53:87

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06