Amazon-ECDSA-384-M01.cer: CN=Amazon ECDSA 384 M01,O=Amazon,C=US (Intermediate Certificate, Expiring 2030-08-23) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: https://www.amazontrust.com/repository/Amazon-ECDSA-384-M01.cer (in DER format )
Serial Number : 166129410533340667278626715942449115271910411
SHA-1 Fingerprint : 33c09aecf33d76c90e158abe5fd45d297f0a49c9
SHA-1 Fingerprint : 33:c0:9a:ec:f3:3d:76:c9:0e:15:8a:be:5f:d4:5d:29:7f:0a:49:c9
SHA-256 Fingerprint : dfe35c740cf41c0b053e2202ea5afc2f021f70bf90b26bc861fe1d9a0bfc4f1e
SHA-256 Fingerprint : df:e3:5c:74:0c:f4:1c:0b:05:3e:22:02:ea:5a:fc:2f:02:1f:70:bf:90:b2:6b:c8:61:fe:1d:9a:0b:fc:4f:1e
Signature Hash Algorithm : sha384
Subject : CN=Amazon ECDSA 384 M01,O=Amazon,C=US
- Country Name: US (United States of America)
- Organization: Amazon
- Common Name: Amazon ECDSA 384 M01
Not Valid Before: 2022-08-23 22:35:05
Not Valid After: 2030-08-23 22:35:05
Issuer (Parent Certificate):
- Issuer Name: CN=Amazon Root CA 4,O=Amazon,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: https://www.digicert.com/content/dam/digicert/pdfs/legal/digicert-cp-v5-12-Final.pdf
- Certificate Practice Statement (CPS) URL: https://www.digicert.com/content/dam/digicert/pdfs/legal/digicert-cps-v5-12-Final.pdf
- Auditor: BDO International Limited
- Standard Audit URL: https://bugzilla.mozilla.org/attachment.cgi?id=9309728
- Standard Audit Period Start Date: 2021.10.01
- Standard Audit Period End Date: 2022.09.30
- Standard Audit Statement Date: 2022.12.22
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: http://crl.e3m01.amazontrust.com/e3m01.crl
- Check its issuer’s audit information: CN=Amazon Root CA 4,O=Amazon,C=US .

Download certificate through curl:

curl -sSL "https://www.amazontrust.com/repository/Amazon-ECDSA-384-M01.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.amazontrust.com/repository/Amazon-ECDSA-384-M01.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:73:12:75:7e:f4:c3:66:0f:08:af:24:03:d3:e5:54:35:d4:0b
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Amazon, CN=Amazon Root CA 4
        Validity
            Not Before: Aug 23 22:35:05 2022 GMT
            Not After : Aug 23 22:35:05 2030 GMT
        Subject: C=US, O=Amazon, CN=Amazon ECDSA 384 M01
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:39:6e:64:e2:66:cd:66:2f:46:3b:a2:3d:ce:f8:
                    66:d9:c1:94:ea:35:e0:ac:30:72:f1:e2:6b:b7:e4:
                    9f:ad:ba:f6:69:93:ad:e1:90:9f:fa:fd:4d:91:d8:
                    22:ee:62:78:68:ea:74:06:ff:b5:de:cc:db:fa:b3:
                    08:92:3b:4f:a3:d1:3e:12:43:fc:f6:5d:eb:ae:99:
                    f9:a9:78:52:c2:fe:b9:fa:2b:1f:89:69:2f:de:bc:
                    f7:bd:4d:42:1c:b7:4e
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Key Identifier: 
                03:E4:A4:04:8E:05:7F:9A:12:97:84:04:FF:11:77:30:8C:BA:2A:A7
            X509v3 Authority Key Identifier: 
                keyid:D3:EC:C7:3A:65:6E:CC:E1:DA:76:9A:56:FB:9C:F3:86:6D:57:E5:81

            Authority Information Access: 
                OCSP - URI:http://ocsp.rootca4.amazontrust.com
                CA Issuers - URI:http://crt.rootca4.amazontrust.com/rootca4.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.rootca4.amazontrust.com/rootca4.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1

    Signature Algorithm: ecdsa-with-SHA384
         30:65:02:31:00:84:cb:f5:3a:f0:95:e0:63:1d:3d:e8:2e:75:
         12:70:91:a2:fd:6a:8d:a0:5a:a7:83:79:4e:58:10:ff:16:b8:
         07:17:e6:c0:79:a4:df:67:62:f5:2d:11:57:70:d3:d1:1a:02:
         30:61:1e:79:59:91:3f:ec:6b:a6:c8:93:48:23:8c:92:ca:8e:
         6d:a3:ce:27:4e:b8:53:f7:b7:ce:c3:35:74:a7:e9:22:b3:56:
         e6:18:11:aa:e0:da:86:04:2d:f1:76:d4:19

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates