DigiCertGlobalCA-1.crt: CN=DigiCert Global CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2021-11-10) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/DigiCertGlobalCA-1.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/DigiCertGlobalCA-1.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:65:cf:cc:19:17:4b:69:87:26:41:59:ca:e0:c7:9e
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Nov 10 00:00:00 2006 GMT
            Not After : Nov 10 00:00:00 2021 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global CA-1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:25:1c:31:67:b7:53:eb:a8:4f:a5:fd:e6:cf:
                    30:52:af:10:35:02:0c:6c:c4:ff:f4:3c:a2:8a:19:
                    73:00:14:da:2b:6a:c1:68:30:4b:ff:1b:36:d4:c8:
                    dd:26:6e:2c:90:16:71:6a:3e:8f:67:b0:92:96:ac:
                    8b:de:28:97:a3:fb:b0:a5:2c:e2:cc:a7:8b:cb:b9:
                    18:51:aa:dd:06:7f:9b:8f:f6:6c:8c:be:04:0c:77:
                    9b:59:50:7b:50:0e:05:5c:25:9c:95:7e:39:87:09:
                    0f:43:4e:0e:50:b7:6f:27:6e:c4:99:0d:f4:33:40:
                    0f:77:ce:e6:4a:54:9e:7d:8c:3c:d3:c1:c0:4b:b4:
                    bb:21:4e:fa:7a:0a:ef:9d:ed:84:17:8a:28:a5:de:
                    38:2e:8b:d4:62:8e:2f:65:af:ec:85:ca:6c:a9:0b:
                    c0:5e:41:eb:a6:b9:ba:79:31:58:09:53:1c:f9:dd:
                    a1:84:53:31:db:19:e6:11:9e:07:74:b1:07:8e:1c:
                    9e:45:8d:77:9c:4a:58:f3:89:8d:3f:62:60:fa:63:
                    a2:e6:ce:e0:3a:ef:e5:3f:95:49:7f:9b:61:fd:76:
                    df:c0:7d:50:d7:d8:5b:53:e3:0f:ee:56:15:87:7c:
                    24:62:3b:69:c4:02:4d:78:b6:19:1e:ee:e0:e9:83:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication, Code Signing, E-mail Protection, Time Stamping
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.1.3.0.3
                  CPS: http://www.digicert.com/ssl-cps-repository.htm
                  User Notice:
                    Explicit Text: 

            X509v3 Basic Constraints: critical
                CA:TRUE
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://www.digicert.com/CACerts/DigiCertGlobalRootCA.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootCA.crl

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalRootCA.crl

            X509v3 Subject Key Identifier: 
                1E:1C:88:15:AA:F2:46:D0:05:DA:E9:1E:DC:22:BD:A8:97:DE:0F:B2
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

    Signature Algorithm: sha1WithRSAEncryption
         64:d7:0f:15:aa:44:48:2a:5b:11:5e:6d:d6:43:5f:e0:6c:8c:
         af:14:d7:9d:5b:fe:4f:0f:eb:a2:94:21:06:83:73:bd:7f:05:
         78:d1:90:6e:33:0c:c8:ec:77:fa:dd:08:35:4c:12:6b:fd:12:
         05:66:e5:c5:0e:64:30:4e:ce:b9:03:7e:9e:c1:db:43:a7:60:
         fe:7e:3a:53:6f:cd:e5:97:e7:d4:05:94:b1:3b:5f:35:0a:c7:
         3b:03:44:fa:dd:ce:b5:83:f9:4f:ba:bf:b2:67:6c:57:37:d7:
         3d:ab:18:51:c6:6a:14:50:3e:95:0c:35:12:75:35:42:95:63:
         76:a6:f6:f6:39:2b:78:1e:21:60:11:37:a2:73:72:c0:4a:78:
         6f:96:44:12:62:6c:38:f7:ea:d3:df:74:11:1b:2e:55:a3:c7:
         bb:8e:7c:2c:58:a4:3c:7a:2f:2c:c3:19:03:ce:ef:bc:56:6b:
         81:af:4a:00:ab:10:53:43:4e:17:fc:ae:78:60:2e:67:00:b0:
         06:37:b7:1a:fc:85:d9:56:2c:5f:6d:e5:b0:7d:46:c2:da:26:
         2a:0a:45:7b:b3:4b:32:ca:87:19:0a:2b:6f:c5:3a:a9:a2:d0:
         0c:21:31:13:14:95:b6:fa:3c:e7:e0:62:61:6e:6d:b7:bb:3c:
         54:b5:96:88

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06