AmazonRootCA3.cer: CN=Amazon Root CA 3,O=Amazon,C=US (Root Certificate, Expiring 2040-05-26) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Certificate Download URL: https://www.amazontrust.com/repository/AmazonRootCA3.cer (in DER format )
Serial Number : 143266986699090766294700635381230934788665930
SHA-1 Fingerprint : 0d44dd8c3c8c1a1a58756481e90f2e2affb3d26e
SHA-1 Fingerprint : 0d:44:dd:8c:3c:8c:1a:1a:58:75:64:81:e9:0f:2e:2a:ff:b3:d2:6e
SHA-256 Fingerprint : 18ce6cfe7bf14e60b2e347b8dfe868cb31d02ebb3ada271569f50343b46db3a4
SHA-256 Fingerprint : 18:ce:6c:fe:7b:f1:4e:60:b2:e3:47:b8:df:e8:68:cb:31:d0:2e:bb:3a:da:27:15:69:f5:03:43:b4:6d:b3:a4
Signature Hash Algorithm : sha256
Subject : CN=Amazon Root CA 3,O=Amazon,C=US
- Country Name: US (United States of America)
- Organization: Amazon
- Common Name: Amazon Root CA 3
Not Valid Before: 2015-05-26 00:00:00
Not Valid After: 2040-05-26 00:00:00
Issuer (Parent Certificate):
- Issuer Name: CN=Amazon Root CA 3,O=Amazon,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Root Certificate
- Certificate Policy (CP) URL: https://www.amazontrust.com/repository/cp-1.0.12.pdf
- Certificate Practice Statement (CPS) URL: https://www.amazontrust.com/repository/cps-1.0.13.pdf
- Auditor: BDO International Limited
- Standard Audit URL: https://www.cpacanada.ca/generichandlers/CPACHandler.ashx?attachmentid=2c238883-a342-4762-8e2a-f506ad5660f8
- Standard Audit Period Start Date: 2021.01.16
- Standard Audit Period End Date: 2022.01.15
- Standard Audit Statement Date: 2022.04.08
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: http://crl.rootca3.amazontrust.com/rootca3.crl

Download certificate through curl:

curl -sSL "https://www.amazontrust.com/repository/AmazonRootCA3.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.amazontrust.com/repository/AmazonRootCA3.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6c:9f:d5:74:97:36:66:3f:3b:0b:9a:d9:e8:9e:76:03:f2:4a
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, O=Amazon, CN=Amazon Root CA 3
        Validity
            Not Before: May 26 00:00:00 2015 GMT
            Not After : May 26 00:00:00 2040 GMT
        Subject: C=US, O=Amazon, CN=Amazon Root CA 3
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:29:97:a7:c6:41:7f:c0:0d:9b:e8:01:1b:56:c6:
                    f2:52:a5:ba:2d:b2:12:e8:d2:2e:d7:fa:c9:c5:d8:
                    aa:6d:1f:73:81:3b:3b:98:6b:39:7c:33:a5:c5:4e:
                    86:8e:80:17:68:62:45:57:7d:44:58:1d:b3:37:e5:
                    67:08:eb:66:de
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                AB:B6:DB:D7:06:9E:37:AC:30:86:07:91:70:C7:9C:C4:19:B1:78:C0
    Signature Algorithm: ecdsa-with-SHA256
         30:46:02:21:00:e0:85:92:a3:17:b7:8d:f9:2b:06:a5:93:ac:
         1a:98:68:61:72:fa:e1:a1:d0:fb:1c:78:60:a6:43:99:c5:b8:
         c4:02:21:00:9c:02:ef:f1:94:9c:b3:96:f9:eb:c6:2a:f8:b6:
         2c:fe:3a:90:14:16:d7:8c:63:24:48:1c:df:30:7d:d5:68:3b

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates