DigiCertECCExtendedValidationServerCA.crt: CN=DigiCert ECC Extended Validation Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Page content

CA Certificate Basic Information

This certificate is root certificate used for the issuance of other certificates.

  • Certificate download URL: http://cacerts.digicert.com/DigiCertECCExtendedValidationServerCA.crt (DER format)
  • Serial number: 3442641611668707326503364432493992066
  • SHA-1 Fingerprint: fc20b60cadac38d1ff40cf1b6eef290f10b57abd
  • SHA-1 Fingerprint: fc:20:b6:0c:ad:ac:38:d1:ff:40:cf:1b:6e:ef:29:0f:10:b5:7a:bd
  • SHA-256 Fingerprint: fdc8986cfac4f35f1acd517e0f61b879882ae076e2ba80b77bd3f0fe5cef8862
  • SHA-256 Fingerprint: fd:c8:98:6c:fa:c4:f3:5f:1a:cd:51:7e:0f:61:b8:79:88:2a:e0:76:e2:ba:80:b7:7b:d3:f0:fe:5c:ef:88:62
  • Signature hash algorithm: sha384
  • Subject: CN=DigiCert ECC Extended Validation Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US
  • Not valid before: 2016-06-21 12:54:27
  • Not valid after: 2031-06-21 12:54:27
  • Issuer:
    • Issuer name: CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
    • Issuer certificate URL: None

Download certificate through curl:

curl -sSL http://cacerts.digicert.com/DigiCertECCExtendedValidationServerCA.crt --output cert.crt

Download certificate through wget:

wget -q http://cacerts.digicert.com/DigiCertECCExtendedValidationServerCA.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:97:07:56:0c:d4:a9:eb:bf:e2:72:f1:e0:96:d8:82
    Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
        Validity
            Not Before: Jun 21 12:54:27 2016 GMT
            Not After : Jun 21 12:54:27 2031 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert ECC Extended Validation Server CA
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:b1:30:f5:f3:11:1d:2f:7e:f2:7f:47:c3:83:16:
                    5c:e5:20:f0:90:5b:70:d5:7d:25:2e:ad:71:67:ad:
                    ec:77:2e:db:50:dd:da:f5:21:50:42:54:4c:04:b5:
                    53:03:a9:fa:0d:81:18:68:2c:7d:1a:6e:13:e7:fe:
                    01:0f:13:89:fe:76:de:85:f0:61:78:f1:89:61:af:
                    00:ad:27:84:05:4e:80:7f:02:a4:cc:bb:e1:62:7a:
                    09:f7:29:62:03:e6:2d
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F8:25:D9:A6:39:C7:C3:81:87:25:3E:30:54:91:18:21:40:9B:17:9D
            X509v3 Authority Key Identifier: 
                keyid:B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: sha384WithRSAEncryption
         b6:eb:69:aa:f0:cd:b8:86:74:0f:6d:bb:a8:54:d1:f3:c6:91:
         73:a7:09:dc:cf:ea:28:6b:19:95:50:56:b8:a3:26:03:af:95:
         b1:5a:52:60:d6:06:66:55:f2:de:95:5b:a4:01:91:21:b8:a7:
         8c:72:ef:86:d4:3b:6b:4b:71:5e:76:3d:5c:a8:90:91:5a:8f:
         ab:fc:c7:73:0d:af:9b:b9:f7:6c:58:23:c2:cd:31:54:a1:b7:
         c8:41:08:b6:e1:11:fa:3a:50:1e:8c:81:d5:53:72:c9:70:49:
         d9:f0:87:31:85:75:63:77:45:62:95:3c:f1:41:01:ec:4c:5e:
         06:a5:2b:f7:f0:36:42:12:6a:57:64:ca:49:62:bc:3f:cf:1d:
         c4:56:43:84:19:61:f1:5d:16:05:ab:54:41:ec:6e:3c:ae:46:
         0e:2a:4c:c6:c7:f6:94:78:93:f4:ee:24:04:52:0e:f8:df:77:
         0e:c0:49:19:da:10:e3:99:97:a4:1c:d8:bd:89:a7:db:19:18:
         20:a8:c5:3b:48:d0:30:9b:c1:d4:d9:cd:ee:3a:a6:ef:38:ff:
         42:9d:1f:36:37:70:b7:26:00:92:f8:b5:7a:87:35:e1:31:ba:
         01:c2:3d:a4:40:40:ee:35:a2:21:3e:64:23:84:15:cc:2f:97:
         e3:4f:ad:d2

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: a651bdd 2022-03-26