G2-RootCA3.cer: CN=Amazon Root CA 3,O=Amazon,C=US (Intermediate Certificate, Expiring 2037-12-31) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: https://www.amazontrust.com/repository/G2-RootCA3.cer (in DER format )
Serial Number : 144918191911138172282893693305499075055848131
SHA-1 Fingerprint : 2d95b685579e358cd8d7b3a50186a5b08d8de0e4
SHA-1 Fingerprint : 2d:95:b6:85:57:9e:35:8c:d8:d7:b3:a5:01:86:a5:b0:8d:8d:e0:e4
SHA-256 Fingerprint : 40c826fdb22ba32a2f9db4f94770f72b8b1da9c8ffda7b11e6f27af245c89b5e
SHA-256 Fingerprint : 40:c8:26:fd:b2:2b:a3:2a:2f:9d:b4:f9:47:70:f7:2b:8b:1d:a9:c8:ff:da:7b:11:e6:f2:7a:f2:45:c8:9b:5e
Signature Hash Algorithm : sha256
Subject : CN=Amazon Root CA 3,O=Amazon,C=US
- Country Name: US (United States of America)
- Organization: Amazon
- Common Name: Amazon Root CA 3
Not Valid Before: 2015-05-25 12:00:00
Not Valid After: 2037-12-31 01:00:00
Issuer (Parent Certificate):
- Issuer Name: CN=Starfield Services Root Certificate Authority - G2,O=Starfield Technologies, Inc.,L=Scottsdale,ST=Arizona,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: Unknown
- No public standard audit information was found by E2Encrypted.com. We update this information regularly, check back later.
- Check its issuer’s audit information: CN=Starfield Services Root Certificate Authority - G2,O=Starfield Technologies, Inc.,L=Scottsdale,ST=Arizona,C=US .

Download certificate through curl:

curl -sSL "https://www.amazontrust.com/repository/G2-RootCA3.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.amazontrust.com/repository/G2-RootCA3.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7f:94:4a:30:cf:cc:4f:74:b5:f5:30:6e:54:d3:b7:be:0a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2
        Validity
            Not Before: May 25 12:00:00 2015 GMT
            Not After : Dec 31 01:00:00 2037 GMT
        Subject: C=US, O=Amazon, CN=Amazon Root CA 3
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:29:97:a7:c6:41:7f:c0:0d:9b:e8:01:1b:56:c6:
                    f2:52:a5:ba:2d:b2:12:e8:d2:2e:d7:fa:c9:c5:d8:
                    aa:6d:1f:73:81:3b:3b:98:6b:39:7c:33:a5:c5:4e:
                    86:8e:80:17:68:62:45:57:7d:44:58:1d:b3:37:e5:
                    67:08:eb:66:de
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                AB:B6:DB:D7:06:9E:37:AC:30:86:07:91:70:C7:9C:C4:19:B1:78:C0
            X509v3 Authority Key Identifier: 
                keyid:9C:5F:00:DF:AA:01:D7:30:2B:38:88:A2:B8:6D:4A:9C:F2:11:91:83

            Authority Information Access: 
                OCSP - URI:http://ocsp.rootg2.amazontrust.com
                CA Issuers - URI:http://crt.rootg2.amazontrust.com/rootg2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.rootg2.amazontrust.com/rootg2.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

    Signature Algorithm: sha256WithRSAEncryption
         6e:59:fa:17:c2:c9:c0:2e:ce:a2:89:e0:29:4a:2b:95:59:52:
         a8:c7:e2:36:12:ce:ed:d4:54:e2:ef:1f:3a:18:93:4a:c8:56:
         a1:63:8c:12:70:6b:f2:f9:32:b7:8f:db:5f:42:21:d2:17:76:
         2d:ec:f5:ab:7c:65:94:7e:b4:ab:03:e1:3d:36:66:a3:bf:e3:
         71:50:aa:74:a4:cc:5f:c6:f8:ec:58:a3:79:9a:97:18:6e:4f:
         d8:fb:6c:d8:80:f5:69:02:ba:a5:55:6d:49:dc:42:de:fd:68:
         48:c3:2a:1b:7b:be:22:90:9e:8c:9b:88:70:7a:76:d5:80:5c:
         c3:4e:6d:c0:af:89:03:2a:4d:ca:15:fa:c4:0e:a4:a2:4c:bd:
         06:a7:c5:49:3e:7c:a4:0b:18:a9:64:a6:ef:73:28:da:f6:91:
         67:71:f3:be:09:56:96:21:0c:25:33:5b:64:57:f5:3b:50:d3:
         85:53:e8:9d:31:4c:47:b0:e7:93:89:8f:4d:a3:37:11:ee:1a:
         28:e0:d1:82:d9:b5:62:cd:58:45:e4:34:39:15:a5:9a:33:5d:
         b8:6e:4c:ce:86:24:a8:70:2e:7d:ab:9a:04:60:b4:54:d6:50:
         36:de:ab:76:04:ff:b3:47:bb:ed:da:2c:e2:f9:d4:91:27:10:
         8f:b8:85:a7

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates