AppleAAICAG3.cer: C=US,O=Apple Inc.,OU=Apple Certification Authority,CN=Apple Application Integration CA - G3 (Intermediate Certificate, Expiring 2029-05-06) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.apple.com/certificateauthority/AppleAAICAG3.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.apple.com/certificateauthority/AppleAAICAG3.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5290937635598555799 (0x496d2fbf3a98da97)
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN=Apple Root CA - G3, OU=Apple Certification Authority, O=Apple Inc., C=US
        Validity
            Not Before: May  6 23:46:30 2014 GMT
            Not After : May  6 23:46:30 2029 GMT
        Subject: CN=Apple Application Integration CA - G3, OU=Apple Certification Authority, O=Apple Inc., C=US
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:f0:17:11:84:19:d7:64:85:d5:1a:5e:25:81:07:
                    76:e8:80:a2:ef:de:7b:ae:4d:e0:8d:fc:4b:93:e1:
                    33:56:d5:66:5b:35:ae:22:d0:97:76:0d:22:4e:7b:
                    ba:08:fd:76:17:ce:88:cb:76:bb:66:70:be:c8:e8:
                    29:84:ff:54:45
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.apple.com/ocsp04-applerootcag3

            X509v3 Subject Key Identifier: 
                23:F2:49:C4:4F:93:E4:EF:27:E6:C4:F6:28:6C:3F:A2:BB:FD:2E:4B
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:BB:B0:DE:A1:58:33:88:9A:A4:8A:99:DE:BE:BD:EB:AF:DA:CB:24:AB

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.apple.com/applerootcag3.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.2.840.113635.100.6.2.14: 
                ..
    Signature Algorithm: ecdsa-with-SHA256
         30:64:02:30:3a:cf:72:83:51:16:99:b1:86:fb:35:c3:56:ca:
         62:bf:f4:17:ed:d9:0f:75:4d:a2:8e:be:f1:9c:81:5e:42:b7:
         89:f8:98:f7:9b:59:9f:98:d5:41:0d:8f:9d:e9:c2:fe:02:30:
         32:2d:d5:44:21:b0:a3:05:77:6c:5d:f3:38:3b:90:67:fd:17:
         7c:2c:21:6d:96:4f:c6:72:69:82:12:6f:54:f8:7a:7d:1b:99:
         cb:9b:09:89:21:61:06:99:0f:09:92:1d

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06