R1-ServerCA1A.cer: CN=Amazon,OU=Server CA 1A,O=Amazon,C=US (Intermediate Certificate, Expiring 2025-10-19) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.amazontrust.com/repository/R1-ServerCA1A.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.amazontrust.com/repository/R1-ServerCA1A.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7f:94:57:50:8c:64:8c:09:ca:65:2e:71:79:18:30:e7:25:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon Root CA 1
        Validity
            Not Before: Oct 22 00:00:00 2015 GMT
            Not After : Oct 19 00:00:00 2025 GMT
        Subject: C=US, O=Amazon, OU=Server CA 1A, CN=Amazon
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:cd:d7:0a:c2:19:ba:7b:fc:6d:22:71:3a:
                    a9:1c:fd:e7:7c:ee:e2:fb:e8:50:c1:ee:d7:81:35:
                    38:43:44:1f:b5:27:b6:88:4e:e6:9d:6c:d7:c7:e5:
                    97:d9:ca:4a:dd:67:5a:90:2c:ac:4f:e8:3c:07:3a:
                    62:6b:f6:ed:9b:e0:8c:63:51:7f:6a:50:cb:aa:e0:
                    1d:36:82:10:f6:83:ac:94:dd:88:af:12:8b:19:ed:
                    fa:68:b2:b0:f6:4c:13:76:f4:9a:60:3c:6a:ce:ae:
                    93:84:f8:0a:d9:b8:8a:41:8d:d2:85:8a:77:a6:bb:
                    a7:d3:0c:3d:0d:09:e4:25:7f:21:d7:77:53:4e:63:
                    27:d8:44:b4:da:c6:5a:43:aa:bf:f6:33:8d:41:81:
                    29:16:41:f4:8f:1c:7c:91:58:d4:20:58:18:86:b0:
                    84:1a:4b:c4:ca:d2:0f:0e:5a:2d:68:bf:bf:3e:d8:
                    af:43:59:3f:80:1e:05:d6:01:a9:e3:64:af:75:19:
                    fc:a0:3d:72:58:4a:50:06:c5:28:81:03:01:ff:2a:
                    10:0c:89:f8:5a:a0:56:00:6c:7d:18:ba:88:66:77:
                    ce:41:e3:91:b6:c5:5b:28:a7:84:cc:0e:c9:74:d3:
                    b5:3b:aa:74:bb:b1:d2:78:8d:81:b3:12:fb:da:fd:
                    af:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                62:D4:42:5E:86:70:75:6A:90:BC:C6:B8:D2:4D:60:C2:34:BA:51:3A
            X509v3 Authority Key Identifier: 
                keyid:84:18:CC:85:34:EC:BC:0C:94:94:2E:08:59:9C:C7:B2:10:4E:0A:08

            Authority Information Access: 
                OCSP - URI:http://ocsp.rootca1.amazontrust.com
                CA Issuers - URI:http://crt.rootca1.amazontrust.com/rootca1.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.rootca1.amazontrust.com/rootca1.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

    Signature Algorithm: sha256WithRSAEncryption
         30:76:d2:58:74:45:33:31:8d:20:4d:2a:84:de:a0:9d:16:a1:
         4e:b4:d4:08:33:f0:7b:b9:7d:fe:ad:08:03:e4:01:96:ba:54:
         1e:79:40:ad:e7:ad:61:e1:f5:8c:1f:2e:17:7a:97:5f:3c:b6:
         da:0a:41:53:b3:6a:ba:54:e4:a9:23:c1:c9:3d:49:c4:e8:69:
         4f:61:69:3b:94:77:54:07:4c:3d:d5:9f:48:48:2d:ac:40:f4:
         8e:49:b2:51:0a:d1:d5:3f:bf:03:e9:c1:2d:d2:59:79:07:25:
         f8:ea:8b:81:e6:3b:f7:42:4c:24:94:ec:26:79:c8:e8:50:56:
         79:31:a1:70:32:38:63:e9:f7:29:2d:d0:09:57:8f:79:62:3b:
         8f:1d:5d:86:b1:dc:5c:7f:90:0d:7f:18:c1:ed:f5:85:5e:d8:
         10:d7:6b:1c:3a:54:5e:b8:ca:e9:e1:cd:f2:06:b3:cb:c1:ba:
         a6:77:57:1c:5c:07:a7:86:ae:89:96:c9:6d:80:24:fe:ad:69:
         78:e4:d1:6a:00:f6:26:88:dc:2e:49:be:8b:77:03:f3:8d:ed:
         e0:1c:ba:61:3f:cf:56:57:8f:53:63:c2:59:e8:e4:ac:94:27:
         29:00:0f:3a:8b:fb:20:0f:24:b8:ed:91:0d:6b:b3:13:fc:c5:
         e8:7a:2d:76

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIERzCCAy+gAwIBAgITBn+UV1CMZIwJymUucXkYMOclkjANBgkqhkiG9w0BAQsF
ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6
b24gUm9vdCBDQSAxMB4XDTE1MTAyMjAwMDAwMFoXDTI1MTAxOTAwMDAwMFowRjEL
MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEVMBMGA1UECxMMU2VydmVyIENB
IDFBMQ8wDQYDVQQDEwZBbWF6b24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCeQM3XCsIZunv8bSJxOqkc/ed87uL76FDB7teBNThDRB+1J7aITuadbNfH
5ZfZykrdZ1qQLKxP6DwHOmJr9u2b4IxjUX9qUMuq4B02ghD2g6yU3YivEosZ7fpo
srD2TBN29JpgPGrOrpOE+ArZuIpBjdKFinemu6fTDD0NCeQlfyHXd1NOYyfYRLTa
xlpDqr/2M41BgSkWQfSPHHyRWNQgWBiGsIQaS8TK0g8OWi1ov78+2K9DWT+AHgXW
AanjZK91GfygPXJYSlAGxSiBAwH/KhAMifhaoFYAbH0Yuohmd85B45G2xVsop4TM
Dsl007U7qnS7sdJ4jYGzEvva/a95AgMBAAGjggE5MIIBNTASBgNVHRMBAf8ECDAG
AQH/AgEAMA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUYtRCXoZwdWqQvMa40k1g
wjS6UTowHwYDVR0jBBgwFoAUhBjMhTTsvAyUlC4IWZzHshBOCggwewYIKwYBBQUH
AQEEbzBtMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5yb290Y2ExLmFtYXpvbnRy
dXN0LmNvbTA6BggrBgEFBQcwAoYuaHR0cDovL2NydC5yb290Y2ExLmFtYXpvbnRy
dXN0LmNvbS9yb290Y2ExLmNlcjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY3Js
LnJvb3RjYTEuYW1hem9udHJ1c3QuY29tL3Jvb3RjYTEuY3JsMBEGA1UdIAQKMAgw
BgYEVR0gADANBgkqhkiG9w0BAQsFAAOCAQEAMHbSWHRFMzGNIE0qhN6gnRahTrTU
CDPwe7l9/q0IA+QBlrpUHnlAreetYeH1jB8uF3qXXzy22gpBU7NqulTkqSPByT1J
xOhpT2FpO5R3VAdMPdWfSEgtrED0jkmyUQrR1T+/A+nBLdJZeQcl+OqLgeY790JM
JJTsJnnI6FBWeTGhcDI4Y+n3KS3QCVePeWI7jx1dhrHcXH+QDX8Ywe31hV7YENdr
HDpUXrjK6eHN8gazy8G6pndXHFwHp4auiZbJbYAk/q1peOTRagD2JojcLkm+i3cD
843t4By6YT/PVlePU2PCWejkrJQnKQAPOov7IA8kuO2RDWuzE/zF6Hotdg==
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06