DigiCertDocumentSigningCA.crt: CN=DigiCert Document Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2028-11-05) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/DigiCertDocumentSigningCA.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/DigiCertDocumentSigningCA.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c7:b7:db:b2:78:24:37:91:19:5e:6a:b1:33:87:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
        Validity
            Not Before: Nov  5 12:00:00 2013 GMT
            Not After : Nov  5 12:00:00 2028 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Document Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:51:16:3a:77:99:f5:16:24:a9:b5:e4:e6:de:
                    95:7a:31:0d:4a:9d:6a:cb:7d:25:7c:a4:9b:9c:84:
                    fa:08:34:68:f5:09:26:3e:31:45:b0:21:48:4c:d5:
                    99:95:86:9f:1a:9d:77:f6:bb:67:0f:a5:5a:9c:a5:
                    0f:fb:9b:e5:d2:18:2a:eb:c6:54:0c:62:88:23:62:
                    ab:61:96:6e:4f:17:62:1e:81:ac:e9:10:e6:c3:9d:
                    b9:b6:f6:e5:e1:ec:c6:ae:4b:2d:9b:48:87:63:bc:
                    1d:9f:60:a5:16:8f:fd:92:eb:71:34:c8:5e:c6:15:
                    d8:8a:4a:fc:13:36:30:aa:0d:36:1c:2d:d0:0e:4f:
                    b5:31:e4:59:4e:f4:0b:32:b9:62:6c:75:65:f8:7a:
                    89:b3:93:5b:34:48:b0:f8:4b:f5:20:56:83:a5:48:
                    f5:8d:94:63:4c:03:27:a9:30:55:67:95:15:1b:29:
                    40:23:9d:b4:a8:c7:0d:65:00:b3:11:e8:22:4f:6f:
                    44:98:e4:fe:72:75:e2:ba:ac:31:4d:5d:e1:0f:a6:
                    94:2c:a0:c8:28:dd:a8:46:05:38:8e:10:14:9a:aa:
                    3f:84:16:e2:4e:5a:92:5f:85:b3:46:cd:41:14:6f:
                    fe:ca:fa:af:bd:ad:35:0a:2d:81:2c:9f:b6:fc:cd:
                    0e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, E-mail Protection
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.0.2.4
                  CPS: https://www.digicert.com/CPS
                  User Notice:
                    Explicit Text: 
                Policy: 2.16.840.1.114412.3.21

            X509v3 Subject Key Identifier: 
                EF:CE:35:93:CE:F6:86:C5:F8:84:F5:0C:E7:5A:6F:D9:2F:4B:E3:64
            X509v3 Authority Key Identifier: 
                keyid:45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F

    Signature Algorithm: sha256WithRSAEncryption
         59:70:cd:f7:30:e3:b4:fa:53:cb:7c:01:84:f2:14:06:09:c2:
         fb:64:4b:65:5e:a2:5e:f9:0c:54:bd:dd:66:ad:5c:84:f8:df:
         8f:7a:6a:77:b3:e8:2c:92:0f:45:99:72:a1:f6:75:38:92:25:
         29:85:b2:6e:41:6b:05:dd:ff:fa:e1:9e:b6:1c:c4:28:5c:21:
         7f:a3:e7:d1:a1:31:e6:06:8a:9f:52:8b:8c:e3:4c:fa:21:ea:
         f5:ad:cf:1f:d8:55:8d:dc:d4:2b:b1:77:e7:83:10:a9:b7:5c:
         c2:31:39:98:98:0a:79:77:21:f5:f7:d9:70:5d:c5:66:02:11:
         9b:95:c0:cb:ad:89:36:0a:c0:83:eb:0a:81:9d:bd:dd:b8:f0:
         d3:07:51:12:8b:9b:6d:ca:ee:44:b3:08:f4:91:79:fe:f5:e0:
         62:11:f2:f7:79:69:fb:9d:99:c9:c7:af:01:e7:4e:83:ed:be:
         1d:cc:10:80:c5:6f:36:cf:35:54:d1:8b:47:8b:76:59:c0:0c:
         09:c9:6a:b1:64:cb:2d:f7:4f:e9:3b:a7:36:20:49:e4:f7:17:
         f0:7b:0f:21:4f:47:d3:8e:d2:90:a4:69:6d:4f:d2:14:e2:c7:
         65:d2:3a:8c:b1:4f:95:14:1f:9c:71:33:49:f6:55:ac:be:a0:
         b0:11:ea:80

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06