DigiCertGlobalCAG3.crt: CN=DigiCert Global CA G3,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2028-08-01) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/DigiCertGlobalCAG3.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/DigiCertGlobalCAG3.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:88:c0:0c:8c:c0:c5:77:66:7e:64:cb:a8:8b:ab:49
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3
        Validity
            Not Before: Aug  1 12:00:00 2013 GMT
            Not After : Aug  1 12:00:00 2028 GMT
        Subject: C=US, O=DigiCert Inc, CN=DigiCert Global CA G3
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:66:3d:9e:a6:d1:05:7c:10:3b:ed:a2:e6:dc:f4:
                    6c:c3:e7:5c:5f:e9:69:3f:86:db:1f:c2:7e:4d:b6:
                    19:af:2b:00:ff:0b:96:b2:5a:50:af:16:82:ea:35:
                    07:97:2a:fd:e4:18:f3:78:70:89:3b:10:80:21:73:
                    fa:e4:a3:29:b5:3d:4e:b5:6d:9c:3f:a1:02:c4:1d:
                    99:65:25:32:9c:e9:77:56:70:3e:70:91:d7:e9:a0:
                    e2:34:ec:38:d1:da:f0
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalRootG3.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

            X509v3 Subject Key Identifier: 
                1B:00:7B:2E:8D:A5:D3:61:21:0C:5D:56:35:03:3F:D2:CD:71:98:0A
            X509v3 Authority Key Identifier: 
                keyid:B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6

    Signature Algorithm: ecdsa-with-SHA384
         30:65:02:31:00:ee:a3:df:47:84:c0:9f:55:cc:a7:8d:2b:23:
         05:94:7d:14:31:47:cc:cc:65:ff:01:19:4a:0d:af:76:31:f2:
         88:a6:01:6b:9d:8e:93:d2:d6:47:65:86:4a:cd:e1:e2:39:02:
         30:4f:30:66:a0:70:62:99:1f:26:1f:73:89:9a:e0:12:46:d4:
         9a:9b:0b:83:a1:36:0c:b9:4e:c8:b7:de:4b:fc:e7:7a:cd:b0:
         0e:34:18:69:3c:a1:11:bc:b1:8e:d0:a0:ff

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06