AppleTimestampCA.cer: C=US,O=Apple Inc.,OU=Apple Certification Authority,CN=Apple Timestamp Certification Authority (Intermediate Certificate, Expiring 2027-04-05) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.apple.com/certificateauthority/AppleTimestampCA.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.apple.com/certificateauthority/AppleTimestampCA.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9028687438367944887 (0x7d4c57639ff3f0b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Apple Inc., OU=Apple Certification Authority, CN=Apple Root CA
        Validity
            Not Before: Apr  5 12:02:44 2012 GMT
            Not After : Apr  5 12:02:44 2027 GMT
        Subject: CN=Apple Timestamp Certification Authority, OU=Apple Certification Authority, O=Apple Inc., C=US
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:77:18:a1:f7:99:10:67:5c:d2:2e:9e:b8:8f:
                    23:67:3e:fc:42:e2:09:7d:0a:8a:b8:18:fc:73:40:
                    2f:bd:c4:d8:50:c5:27:c8:fe:b8:34:70:a0:0d:13:
                    3c:bd:08:4e:9a:93:6f:39:37:da:9e:65:f5:b4:63:
                    f4:90:c8:49:6d:5d:20:d3:39:fd:09:ba:f4:3a:f3:
                    ce:4a:69:64:05:99:46:e0:da:35:c4:65:18:1e:c6:
                    16:a3:12:61:b4:2e:f5:f0:89:0d:8c:dc:3d:f6:06:
                    cf:6f:86:25:4c:09:c2:1b:c8:0e:78:88:8d:c1:22:
                    b8:ba:21:13:9b:ca:ee:8a:9e:dd:7b:5b:ff:a3:e9:
                    d1:a3:81:7e:fe:ff:e6:8c:49:e4:3b:0a:f9:10:a6:
                    72:33:bb:2c:c4:4a:5a:72:0a:39:50:74:dd:28:6e:
                    79:5f:7e:a7:a8:14:cf:56:b3:56:6c:a5:e9:f0:c4:
                    ae:f9:ea:20:8e:18:c7:28:74:e2:08:4d:89:26:42:
                    79:5e:f6:60:e3:45:58:a1:fb:51:49:5e:92:4a:4d:
                    b9:ef:d4:73:b5:da:04:7b:e3:52:9f:cb:a3:19:5d:
                    ac:6b:98:6c:9e:e2:ec:74:2d:44:3e:e0:61:3e:07:
                    45:7e:34:75:26:98:40:9b:75:9e:c8:30:ed:4b:bf:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                34:CD:25:4E:CD:DE:37:85:38:A1:58:26:F8:F9:E2:29:DE:F2:1C:93
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:2B:D0:69:47:94:76:09:FE:F4:6B:8D:2E:40:A6:F7:47:4D:7F:08:5E

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.apple.com/root.crl

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            1.2.840.113635.100.6.2.9: 
                ..
    Signature Algorithm: sha256WithRSAEncryption
         36:d2:f5:de:71:53:07:c9:23:d8:78:9b:65:bc:f3:d5:5b:e9:
         b8:7f:1b:23:c7:a2:cf:b4:a9:28:e9:f8:dd:70:88:21:39:f3:
         db:33:9c:c3:72:43:d6:3d:42:51:97:ba:ad:1d:8e:92:d2:75:
         8b:c3:5d:9c:f5:cb:8c:dc:6a:6a:3a:dd:eb:54:7d:ed:14:6b:
         f3:d6:3e:93:c8:6d:7a:54:5f:f2:43:8e:10:d0:76:5c:9b:00:
         0c:1d:4e:ca:3c:cd:fa:e6:f7:c2:3e:72:b7:b8:de:e8:34:aa:
         15:a0:ae:5c:67:a8:0c:ac:9b:1e:65:b3:e3:0f:30:42:34:e9:
         ae:d3:01:d3:a7:dd:42:73:75:7c:51:43:85:9a:60:10:dc:ae:
         27:d2:6b:67:c9:33:45:6f:c9:98:1e:a0:9a:7f:4d:11:93:e1:
         69:ff:ec:4b:45:f3:4e:ca:22:0e:57:d7:22:07:e5:22:b4:87:
         e9:9c:d3:45:cb:6e:3f:e5:8e:b8:fc:46:d5:5c:c9:b0:ab:05:
         3a:6d:37:28:a3:a8:46:65:6f:55:a1:68:88:ea:52:3e:c9:f4:
         d4:e6:fa:3f:a4:e4:26:80:b5:3a:6b:d6:c3:e5:f9:32:81:c8:
         32:a2:48:e1:8e:06:a3:19:e4:b3:cb:3b:4b:df:e0:cc:0e:b2:
         af:98:d1:83

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06