ThawteECCCA2018.crt: CN=Thawte ECC CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

  • Certificate download URL: http://cacerts.thawte.com/ThawteECCCA2018.crt (DER format)
  • Serial number: 20478275786085963616817928173658059735
  • SHA-1 Fingerprint: f915ba545c9357aee20520094d423a0d48931d63
  • SHA-1 Fingerprint: f9:15:ba:54:5c:93:57:ae:e2:05:20:09:4d:42:3a:0d:48:93:1d:63
  • SHA-256 Fingerprint: 6e62cbe3e42a41c50405b3e2f1a44257683267856184af9c02112070ac836936
  • SHA-256 Fingerprint: 6e:62:cb:e3:e4:2a:41:c5:04:05:b3:e2:f1:a4:42:57:68:32:67:85:61:84:af:9c:02:11:20:70:ac:83:69:36
  • Signature hash algorithm: sha256
  • Subject: CN=Thawte ECC CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US
  • Not valid before: 2017-11-06 12:24:15
  • Not valid after: 2027-11-06 12:24:15
  • Issuer:
    • Issuer name: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
    • Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacerts.thawte.com/ThawteECCCA2018.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.thawte.com/ThawteECCCA2018.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:67:f8:f2:c8:9c:6b:f5:5a:19:ef:6b:e4:2c:33:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Nov  6 12:24:15 2017 GMT
            Not After : Nov  6 12:24:15 2027 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Thawte ECC CA 2018
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:ff:9e:fa:61:79:dc:5b:23:34:fe:1f:ae:12:de:
                    ff:f8:6e:68:94:ab:0e:9f:16:6a:7b:0a:9a:4c:b2:
                    ce:7f:ce:aa:82:00:aa:59:02:86:4a:5b:06:65:0b:
                    f5:03:a8:3b:f0:96:bc:1e:c2:e6:36:9b:e8:23:a2:
                    cc:83:dd:9d:81
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                04:AF:4F:6E:0A:36:A6:C2:27:82:0E:9C:FE:B9:02:42:49:3B:F5:B9
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: sha256WithRSAEncryption
         85:cf:7c:95:62:ec:30:99:e7:cc:1f:25:89:71:ac:e5:81:e1:
         ab:e6:18:8f:9b:d0:7d:e7:08:5b:9c:54:99:00:14:ae:5b:72:
         ef:a0:a4:da:a5:6e:7d:47:0c:b2:42:3a:7a:6e:6c:bb:45:7f:
         c7:43:f2:35:d2:40:8d:9c:77:77:1e:73:4f:47:3f:7a:a2:df:
         32:d4:af:52:69:66:30:66:87:f5:84:60:f5:12:8d:b9:d1:4a:
         2a:be:d8:39:49:1d:30:5c:9c:62:05:24:a4:3f:61:f7:02:2e:
         31:a9:f0:65:c5:1f:57:b9:c0:20:fc:50:50:93:a0:54:60:9b:
         55:82:7d:30:9e:ec:b8:bd:20:94:c1:b5:43:a6:b6:3d:61:ae:
         c9:50:c4:8f:7d:02:f7:e6:28:64:45:94:86:1b:83:99:6c:10:
         28:57:2b:f5:65:39:d5:9d:8a:2c:54:29:b1:e3:7b:31:3d:83:
         b4:94:bf:f3:99:a5:ac:98:d0:05:53:27:3c:71:2e:2f:5a:91:
         10:a9:5e:09:dd:a9:90:83:39:8d:71:67:55:2d:da:4d:0b:b7:
         cc:b8:1f:0b:ba:0d:7d:0a:39:84:78:42:be:43:c7:8f:af:27:
         c6:e4:01:c2:15:17:51:99:c1:6a:32:50:0d:47:11:2b:d1:c3:
         1f:e0:96:1e

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: a651bdd 2022-03-26