AppleSoftwareUpdateCertificationAuthority.cer: C=US,O=Apple Inc.,OU=Certification Authority,CN=Apple Software Update Certification Authority (Intermediate Certificate, Expiring 2031-10-15) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.apple.com/certificateauthority/AppleSoftwareUpdateCertificationAuthority.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.apple.com/certificateauthority/AppleSoftwareUpdateCertificationAuthority.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a2:47:a1:16:90:dc:28:2e:fc:f7:2c:5f:42:7d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Apple Inc., OU=Apple Certification Authority, CN=Apple Root CA
        Validity
            Not Before: Mar 22 17:53:12 2019 GMT
            Not After : Oct 15 00:00:00 2031 GMT
        Subject: CN=Apple Software Update Certification Authority, OU=Certification Authority, O=Apple Inc., C=US
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:20:1a:b4:13:ac:56:bf:22:5f:19:0a:84:
                    5e:c1:c5:1c:04:9e:05:67:5b:6e:9f:9b:5d:a7:b3:
                    e3:2c:fb:ff:90:7a:4c:36:13:a8:13:75:96:1e:79:
                    cd:d3:01:9d:57:4f:c3:58:04:01:ed:6b:6e:ba:af:
                    e4:e7:cf:a5:27:72:94:b7:74:4c:4d:b6:38:42:c1:
                    8b:48:bb:14:79:d8:c2:5a:fd:8e:cd:f0:50:1c:39:
                    76:e2:95:13:50:47:fc:e6:2a:a8:8b:cd:d0:9a:58:
                    3f:5c:de:93:91:65:48:f1:fb:f5:55:45:e9:b8:20:
                    d5:57:3b:93:b4:30:11:a5:71:6c:08:54:b1:d8:79:
                    a9:1c:23:de:ef:f5:d6:65:ce:e9:af:73:ad:b1:2c:
                    43:4c:2d:0b:e1:ce:cf:16:dd:b7:2e:ec:51:08:38:
                    28:be:45:d9:5e:4c:d9:b2:2a:7c:dd:b2:18:d3:e2:
                    ce:ba:42:ed:e1:74:52:8c:41:42:05:ef:ec:bf:6e:
                    e3:b3:99:e5:5e:21:46:54:b4:fc:72:99:4d:65:9f:
                    fa:07:da:5b:8c:e7:cc:6c:e1:7b:55:e0:a6:57:bc:
                    42:f7:9b:bf:06:80:e8:0c:72:6e:12:b1:86:4b:16:
                    7b:7b:78:95:33:a2:b9:a0:be:75:a2:5e:44:0c:1a:
                    fa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:2B:D0:69:47:94:76:09:FE:F4:6B:8D:2E:40:A6:F7:47:4D:7F:08:5E

            Authority Information Access: 
                OCSP - URI:http://ocsp.apple.com/ocsp03-applerootca

            X509v3 Extended Key Usage: 
                1.2.840.113635.100.4.1
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.apple.com/root.crl

            X509v3 Subject Key Identifier: 
                59:57:FC:BA:39:CF:D3:58:76:43:13:B3:C8:C4:06:AD:08:53:2B:44
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.2.840.113635.100.6.2.19: 
                ..
    Signature Algorithm: sha256WithRSAEncryption
         92:69:78:04:83:b1:44:82:08:db:b1:fb:0c:da:61:e2:3f:1b:
         6e:f7:84:98:bf:fc:c8:59:8f:3a:ed:98:54:ff:17:40:a6:c8:
         dc:c9:d6:a9:ef:24:3d:ab:41:1e:a4:b9:48:d2:55:2d:9a:96:
         0e:94:cc:04:44:90:97:1f:f5:6a:ce:94:82:fe:0d:e2:e1:ed:
         f9:b3:6d:e7:55:a0:52:c3:79:fd:17:6d:63:96:99:c1:22:ca:
         bc:24:82:3a:42:97:a2:50:65:98:35:06:6f:ec:72:81:a7:ff:
         fc:cd:94:14:13:fd:f5:6b:48:d8:64:d8:8f:2c:bb:5b:08:6c:
         e8:22:ca:af:e1:e4:9d:17:9c:69:cc:3c:55:2c:93:bc:87:83:
         69:53:fb:a1:ef:74:ce:61:02:d5:34:27:06:aa:c9:0b:c6:d3:
         f4:14:62:78:4e:1e:d7:f6:4a:a2:ed:52:3a:ea:d6:f0:5a:ae:
         a5:c1:04:02:f4:c5:30:10:50:69:f2:65:4f:85:24:31:83:0c:
         cd:11:f9:8e:7e:35:7a:dc:d7:22:cf:78:fd:12:3e:b4:78:46:
         06:71:50:6e:83:94:5c:02:f7:45:1e:a0:e0:92:0d:58:41:6e:
         80:a1:2c:55:f3:22:e9:2b:a7:61:dc:c6:ae:5a:6c:4d:8f:f1:
         ec:3c:a5:79

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06