G2-RootCA3.orig.cer: CN=Amazon Root CA 3,O=Amazon,C=US (Intermediate Certificate, Expiring 2037-12-31) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.amazontrust.com/repository/G2-RootCA3.orig.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.amazontrust.com/repository/G2-RootCA3.orig.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7b:50:4c:ad:72:28:9a:46:e9:ca:14:0f:a2:14:e8:6f:8a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2
        Validity
            Not Before: Oct 21 22:21:08 2015 GMT
            Not After : Dec 31 00:00:00 2037 GMT
        Subject: C=US, O=Amazon, CN=Amazon Root CA 3
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:29:97:a7:c6:41:7f:c0:0d:9b:e8:01:1b:56:c6:
                    f2:52:a5:ba:2d:b2:12:e8:d2:2e:d7:fa:c9:c5:d8:
                    aa:6d:1f:73:81:3b:3b:98:6b:39:7c:33:a5:c5:4e:
                    86:8e:80:17:68:62:45:57:7d:44:58:1d:b3:37:e5:
                    67:08:eb:66:de
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                AB:B6:DB:D7:06:9E:37:AC:30:86:07:91:70:C7:9C:C4:19:B1:78:C0
            X509v3 Authority Key Identifier: 
                keyid:9C:5F:00:DF:AA:01:D7:30:2B:38:88:A2:B8:6D:4A:9C:F2:11:91:83

            Authority Information Access: 
                OCSP - URI:http://ocsp.rootg2.amazontrust.com
                CA Issuers - URI:http://crl.rootg2.amazontrust.com/rootg2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.rootg2.amazontrust.com/rootg2.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

    Signature Algorithm: sha256WithRSAEncryption
         85:f2:92:56:67:b8:4a:cb:5e:ba:e6:2e:40:ef:d5:a8:51:47:
         c1:80:32:ba:23:39:a9:62:7b:e7:93:8f:c9:90:2a:85:5d:a2:
         04:f5:4c:98:c7:99:67:97:6e:a8:ed:78:a5:a3:9a:1d:48:ac:
         4b:28:cc:9f:ab:5d:15:83:14:4e:4e:7f:03:2a:f2:04:0d:b8:
         eb:bb:a7:29:5a:42:c4:14:f8:85:25:c8:9e:26:bd:09:8e:56:
         d9:30:ec:1f:90:b2:de:4c:0a:39:ba:50:e1:61:2c:84:d9:4d:
         5c:48:7a:ec:47:6f:9c:f2:26:15:25:08:61:89:fa:2c:0f:7d:
         4d:e8:ec:ba:3c:d0:84:de:c4:64:b5:c0:f8:ba:5f:97:da:21:
         a7:08:65:ce:5d:05:14:9c:da:83:d1:04:4e:ff:a3:4a:eb:ed:
         4e:1c:21:b6:f1:c0:0a:32:19:7d:55:d4:57:16:47:9e:63:ad:
         25:ef:88:ba:3b:2b:d3:d2:af:f3:23:5f:a0:6a:46:18:19:02:
         eb:58:61:34:70:44:4f:c6:ca:33:06:99:c7:17:93:70:ed:91:
         b3:27:e0:03:81:54:77:fc:ca:d4:78:94:a3:49:63:7f:36:57:
         56:1f:71:17:90:94:3a:b9:67:bd:09:b3:b6:e2:d8:1f:d1:ba:
         09:30:84:0a

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIDxzCCAq+gAwIBAgITBntQTK1yKJpG6coUD6IU6G+KAjANBgkqhkiG9w0BAQsF
ADCBmDELMAkGA1UEBhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNj
b3R0c2RhbGUxJTAjBgNVBAoTHFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4x
OzA5BgNVBAMTMlN0YXJmaWVsZCBTZXJ2aWNlcyBSb290IENlcnRpZmljYXRlIEF1
dGhvcml0eSAtIEcyMB4XDTE1MTAyMTIyMjEwOFoXDTM3MTIzMTAwMDAwMFowOTEL
MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv
b3QgQ0EgMzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABCmXp8ZBf8ANm+gBG1bG
8lKlui2yEujSLtf6ycXYqm0fc4E7O5hrOXwzpcVOho6AF2hiRVd9RFgdszflZwjr
Zt6jggExMIIBLTAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNV
HQ4EFgQUq7bb1waeN6wwhgeRcMecxBmxeMAwHwYDVR0jBBgwFoAUnF8A36oB1zAr
OIiiuG1KnPIRkYMweAYIKwYBBQUHAQEEbDBqMC4GCCsGAQUFBzABhiJodHRwOi8v
b2NzcC5yb290ZzIuYW1hem9udHJ1c3QuY29tMDgGCCsGAQUFBzAChixodHRwOi8v
Y3JsLnJvb3RnMi5hbWF6b250cnVzdC5jb20vcm9vdGcyLmNlcjA9BgNVHR8ENjA0
MDKgMKAuhixodHRwOi8vY3JsLnJvb3RnMi5hbWF6b250cnVzdC5jb20vcm9vdGcy
LmNybDARBgNVHSAECjAIMAYGBFUdIAAwDQYJKoZIhvcNAQELBQADggEBAIXyklZn
uErLXrrmLkDv1ahRR8GAMrojOalie+eTj8mQKoVdogT1TJjHmWeXbqjteKWjmh1I
rEsozJ+rXRWDFE5OfwMq8gQNuOu7pylaQsQU+IUlyJ4mvQmOVtkw7B+Qst5MCjm6
UOFhLITZTVxIeuxHb5zyJhUlCGGJ+iwPfU3o7Lo80ITexGS1wPi6X5faIacIZc5d
BRSc2oPRBE7/o0rr7U4cIbbxwAoyGX1V1FcWR55jrSXviLo7K9PSr/MjX6BqRhgZ
AutYYTRwRE/GyjMGmccXk3DtkbMn4AOBVHf8ytR4lKNJY382V1YfcReQlDq5Z70J
s7bi2B/RugkwhAo=
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06