DigiCertSecureSiteEVCNCAG3.crt: CN=DigiCert Secure Site EV CN CA G3,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2030-03-13) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://cacerts.digicert.cn/DigiCertSecureSiteEVCNCAG3.crt" --output cert.crt

Download certificate through wget:

wget -q "http://cacerts.digicert.cn/DigiCertSecureSiteEVCNCAG3.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:43:71:68:28:d4:7a:3e:75:07:45:7d:59:3e:d6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
        Validity
            Not Before: Mar 13 12:00:35 2020 GMT
            Not After : Mar 13 12:00:35 2030 GMT
        Subject: C=US, O=DigiCert Inc, CN=DigiCert Secure Site EV CN CA G3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:45:bc:7a:d7:d9:74:74:8e:c6:11:c8:a4:0a:
                    3b:73:fb:e2:d0:d7:e9:6a:5b:56:e4:c1:91:e3:3b:
                    03:bf:31:92:86:0a:f8:2e:f7:f2:20:45:03:88:c0:
                    96:91:da:63:fa:08:6c:f6:b9:5a:8a:8d:c8:71:4b:
                    22:85:94:b8:bc:75:31:35:bd:7c:81:28:50:7b:e5:
                    b7:8e:e6:93:83:f8:df:7d:09:9f:be:8c:3a:e3:d1:
                    ec:0e:5f:a3:23:16:6d:18:07:b5:a9:ab:ff:6e:ed:
                    2f:38:56:2d:ef:d0:e4:fd:24:4c:b3:1a:d0:92:09:
                    e2:2c:03:4b:c0:d9:99:82:bb:b0:31:64:d8:19:6b:
                    d0:27:7a:20:a5:2d:6c:10:f5:24:6b:a9:ab:af:87:
                    c6:02:09:75:e2:04:6e:ff:b4:fe:b5:0c:e2:5b:66:
                    77:62:19:97:d5:0a:4f:50:ba:b6:09:0c:dc:b7:9e:
                    36:45:03:14:09:d7:89:25:a6:fb:b4:84:61:2e:0e:
                    a1:dc:4c:88:c1:e8:6c:72:a6:6f:31:03:a5:51:88:
                    b9:14:61:8b:de:38:48:4a:eb:3c:c2:9d:99:0b:f5:
                    30:b1:15:91:e1:c6:25:a6:35:29:7d:8c:9f:97:94:
                    75:4e:23:01:f7:e3:21:ae:41:2a:c5:0d:29:2f:8c:
                    e0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7E:87:6C:D6:0C:3A:33:18:14:9B:CB:1E:3C:AF:8D:11:D3:DB:48:A2
            X509v3 Authority Key Identifier: 
                keyid:B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.cn

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.digicert.cn/DigiCertHighAssuranceEVRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

    Signature Algorithm: sha256WithRSAEncryption
         b2:b7:3e:83:23:ca:46:76:56:8d:00:94:2c:0b:bb:71:b5:44:
         c8:ea:84:7f:7b:10:e6:d1:d3:80:ed:7c:c5:22:a4:49:2b:2e:
         64:37:32:ea:ff:68:f1:eb:02:af:38:ec:77:f3:b6:82:bb:1a:
         a0:67:fb:13:74:ef:71:b0:b6:bf:ef:b1:b2:97:82:9a:91:30:
         1f:6c:2c:57:ec:6b:9e:cc:3f:42:92:6a:f0:59:0c:b1:14:a7:
         8b:d3:ef:75:f6:a4:4d:e1:7c:b2:24:e2:3b:42:8d:c9:14:39:
         ac:2f:6a:4c:04:0a:d7:54:c5:77:02:9c:0a:d7:b4:dc:60:f9:
         d2:98:57:c3:b5:5f:2f:25:be:cd:1c:31:09:c9:e1:f4:29:f9:
         6b:59:ff:99:43:08:42:dd:b2:ba:01:f8:51:17:bb:b2:f0:52:
         c1:f8:f4:b0:bb:52:f1:be:e1:4c:33:c5:56:c6:a9:65:da:2b:
         dd:12:0b:32:49:b1:d6:63:0b:fc:2c:7f:e0:7b:7a:87:18:22:
         7a:2c:ad:a0:b5:71:f0:f3:97:36:80:3d:d5:c1:b4:fc:6e:c4:
         a2:db:b6:90:3b:3c:1b:d2:e7:20:d3:0e:54:8f:cc:72:43:70:
         20:ca:3d:58:f7:9e:94:64:38:8d:dd:9b:ec:ce:b3:e0:22:a8:
         e9:07:85:df

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06