ThawteECCCA2018.crt: CN=Thawte ECC CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2027-11-06) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: http://cacerts.thawte.com/ThawteECCCA2018.crt (in DER format )
Serial Number : 20478275786085963616817928173658059735
SHA-1 Fingerprint : f915ba545c9357aee20520094d423a0d48931d63
SHA-1 Fingerprint : f9:15:ba:54:5c:93:57:ae:e2:05:20:09:4d:42:3a:0d:48:93:1d:63
SHA-256 Fingerprint : 6e62cbe3e42a41c50405b3e2f1a44257683267856184af9c02112070ac836936
SHA-256 Fingerprint : 6e:62:cb:e3:e4:2a:41:c5:04:05:b3:e2:f1:a4:42:57:68:32:67:85:61:84:af:9c:02:11:20:70:ac:83:69:36
Signature Hash Algorithm : sha256
Subject : CN=Thawte ECC CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US
- Country Name: US (United States of America)
- Organization: DigiCert Inc
- Organization Unit: www.digicert.com
- Common Name: Thawte ECC CA 2018
Not Valid Before: 2017-11-06 12:24:15
Not Valid After: 2027-11-06 12:24:15
Issuer (Parent Certificate):
- Issuer Name: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: Unknown
- No public standard audit information was found by E2Encrypted.com. We update this information regularly, check back later.
- Check its issuer’s audit information: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US .

Download certificate through curl:

curl -sSL "http://cacerts.thawte.com/ThawteECCCA2018.crt" --output cert.crt

Download certificate through wget:

wget -q "http://cacerts.thawte.com/ThawteECCCA2018.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:67:f8:f2:c8:9c:6b:f5:5a:19:ef:6b:e4:2c:33:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Nov  6 12:24:15 2017 GMT
            Not After : Nov  6 12:24:15 2027 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Thawte ECC CA 2018
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:ff:9e:fa:61:79:dc:5b:23:34:fe:1f:ae:12:de:
                    ff:f8:6e:68:94:ab:0e:9f:16:6a:7b:0a:9a:4c:b2:
                    ce:7f:ce:aa:82:00:aa:59:02:86:4a:5b:06:65:0b:
                    f5:03:a8:3b:f0:96:bc:1e:c2:e6:36:9b:e8:23:a2:
                    cc:83:dd:9d:81
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                04:AF:4F:6E:0A:36:A6:C2:27:82:0E:9C:FE:B9:02:42:49:3B:F5:B9
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: sha256WithRSAEncryption
         85:cf:7c:95:62:ec:30:99:e7:cc:1f:25:89:71:ac:e5:81:e1:
         ab:e6:18:8f:9b:d0:7d:e7:08:5b:9c:54:99:00:14:ae:5b:72:
         ef:a0:a4:da:a5:6e:7d:47:0c:b2:42:3a:7a:6e:6c:bb:45:7f:
         c7:43:f2:35:d2:40:8d:9c:77:77:1e:73:4f:47:3f:7a:a2:df:
         32:d4:af:52:69:66:30:66:87:f5:84:60:f5:12:8d:b9:d1:4a:
         2a:be:d8:39:49:1d:30:5c:9c:62:05:24:a4:3f:61:f7:02:2e:
         31:a9:f0:65:c5:1f:57:b9:c0:20:fc:50:50:93:a0:54:60:9b:
         55:82:7d:30:9e:ec:b8:bd:20:94:c1:b5:43:a6:b6:3d:61:ae:
         c9:50:c4:8f:7d:02:f7:e6:28:64:45:94:86:1b:83:99:6c:10:
         28:57:2b:f5:65:39:d5:9d:8a:2c:54:29:b1:e3:7b:31:3d:83:
         b4:94:bf:f3:99:a5:ac:98:d0:05:53:27:3c:71:2e:2f:5a:91:
         10:a9:5e:09:dd:a9:90:83:39:8d:71:67:55:2d:da:4d:0b:b7:
         cc:b8:1f:0b:ba:0d:7d:0a:39:84:78:42:be:43:c7:8f:af:27:
         c6:e4:01:c2:15:17:51:99:c1:6a:32:50:0d:47:11:2b:d1:c3:
         1f:e0:96:1e

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates