lets-encrypt-r3-cross-signed.der: CN=R3,O=Let's Encrypt,C=US (Intermediate Certificate, Expiring 2021-09-29) detail info and audit record

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

• Certificate Download URL: https://letsencrypt.org/certs/lets-encrypt-r3-cross-signed.der (in DER format )
• Serial Number : 85078157426496920958827089468591623647
• SHA-1 Fingerprint : 48504e974c0dac5b5cd476c8202274b24c8c7172
• SHA-1 Fingerprint : 48:50:4e:97:4c:0d:ac:5b:5c:d4:76:c8:20:22:74:b2:4c:8c:71:72
• SHA-256 Fingerprint : 730c1bdcd85f57ce5dc0bba733e5f1ba5a925b2a771d640a26f7a454224dad3b
• SHA-256 Fingerprint : 73:0c:1b:dc:d8:5f:57:ce:5d:c0:bb:a7:33:e5:f1:ba:5a:92:5b:2a:77:1d:64:0a:26:f7:a4:54:22:4d:ad:3b
• Signature Hash Algorithm : sha256
• Subject : CN=R3,O=Let’s Encrypt,C=US
  • Country Name: US (United States of America)
  • Organization: Let’s Encrypt
  • Common Name: R3
• Not Valid Before: 2020-10-07 19:21:40
• Not Valid After: 2021-09-29 19:21:40
• Issuer (Parent Certificate):
  • Issuer Name: CN=DST Root CA X3,O=Digital Signature Trust Co.
  • Issuer Certificate URL: NA
• Audit Record:
  • Revocation Status: Not Revoked
  • Certificate Policy (CP) URL: https://letsencrypt.org/documents/isrg-cp-v2.4/
  • Certificate Practice Statement (CPS) URL: https://letsencrypt.org/documents/isrg-cps-v2.9/ https://letsencrypt.org/documents/isrg-cps-v2.7/
  • Auditor: Schellman & Company, LLC.
  • Standard Audit URL: https://www.cpacanada.ca/generichandlers/CPACHandler.ashx?attachmentid=c70581de-e331-4411-8be9-7c182502c042
  • Standard Audit Period Start Date: 2019.09.01
  • Standard Audit Period End Date: 2020.08.31
  • Standard Audit Statement Date: 2020.10.02
  • Standard Audit Type: WebTrust
  • Full CRL Issued By This CA: Unknown
  • Check its issuer’s audit information: CN=DST Root CA X3,O=Digital Signature Trust Co. .

Download certificate through curl:

curl -sSL "https://letsencrypt.org/certs/lets-encrypt-r3-cross-signed.der" --output cert.crt

Download certificate through wget:

wget -q "https://letsencrypt.org/certs/lets-encrypt-r3-cross-signed.der" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:01:75:04:83:14:a4:c8:21:8c:84:a9:0c:16:cd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: O=Digital Signature Trust Co., CN=DST Root CA X3
        Validity
            Not Before: Oct  7 19:21:40 2020 GMT
            Not After : Sep 29 19:21:40 2021 GMT
        Subject: C=US, O=Let's Encrypt, CN=R3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:15:28:cc:f6:a0:94:d3:0f:12:ec:8d:55:
                    92:c3:f8:82:f1:99:a6:7a:42:88:a7:5d:26:aa:b5:
                    2b:b9:c5:4c:b1:af:8e:6b:f9:75:c8:a3:d7:0f:47:
                    94:14:55:35:57:8c:9e:a8:a2:39:19:f5:82:3c:42:
                    a9:4e:6e:f5:3b:c3:2e:db:8d:c0:b0:5c:f3:59:38:
                    e7:ed:cf:69:f0:5a:0b:1b:be:c0:94:24:25:87:fa:
                    37:71:b3:13:e7:1c:ac:e1:9b:ef:db:e4:3b:45:52:
                    45:96:a9:c1:53:ce:34:c8:52:ee:b5:ae:ed:8f:de:
                    60:70:e2:a5:54:ab:b6:6d:0e:97:a5:40:34:6b:2b:
                    d3:bc:66:eb:66:34:7c:fa:6b:8b:8f:57:29:99:f8:
                    30:17:5d:ba:72:6f:fb:81:c5:ad:d2:86:58:3d:17:
                    c7:e7:09:bb:f1:2b:f7:86:dc:c1:da:71:5d:d4:46:
                    e3:cc:ad:25:c1:88:bc:60:67:75:66:b3:f1:18:f7:
                    a2:5c:e6:53:ff:3a:88:b6:47:a5:ff:13:18:ea:98:
                    09:77:3f:9d:53:f9:cf:01:e5:f5:a6:70:17:14:af:
                    63:a4:ff:99:b3:93:9d:dc:53:a7:06:fe:48:85:1d:
                    a1:69:ae:25:75:bb:13:cc:52:03:f5:ed:51:a1:8b:
                    db:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:http://apps.identrust.com/roots/dstrootcax3.p7c

            X509v3 Authority Key Identifier: 
                keyid:C4:A7:B1:A4:7B:2C:71:FA:DB:E1:4B:90:75:FF:C4:15:60:85:89:10

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.44947.1.1.1
                  CPS: http://cps.root-x1.letsencrypt.org

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.identrust.com/DSTROOTCAX3CRL.crl

            X509v3 Subject Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         d9:4c:e0:c9:f5:84:88:37:31:db:bb:13:e2:b3:fc:8b:6b:62:
         12:6c:58:b7:49:7e:3c:02:b7:a8:1f:28:61:eb:ce:e0:2e:73:
         ef:49:07:7a:35:84:1f:1d:ad:68:f0:d8:fe:56:81:2f:6d:7f:
         58:a6:6e:35:36:10:1c:73:c3:e5:bd:6d:5e:01:d7:6e:72:fb:
         2a:a0:b8:d3:57:64:e5:5b:c2:69:d4:d0:b2:f7:7c:4b:c3:17:
         8e:88:72:73:dc:fd:fc:6d:bd:e3:c9:0b:8e:61:3a:16:58:7d:
         74:36:2b:55:80:3d:c7:63:be:84:43:c6:39:a1:0e:6b:57:9e:
         3f:29:c1:80:f6:b2:bd:47:cb:aa:30:6c:b7:32:e1:59:54:0b:
         18:09:17:5e:63:6c:fb:96:67:3c:1c:73:0c:93:8b:c6:11:76:
         24:86:de:40:07:07:e4:7d:2d:66:b5:25:a3:96:58:c8:ea:80:
         ee:cf:69:3b:96:fc:e6:8d:c0:33:f3:89:f8:29:2d:14:14:2d:
         7e:f0:61:70:95:5d:f7:0b:e5:c0:fb:24:fa:ec:8e:cb:61:c8:
         ee:63:71:28:a8:2c:05:3b:77:ef:9b:5e:03:64:f0:51:d1:e4:
         85:53:5c:b0:02:97:d4:7e:c6:34:d2:ce:10:00:e4:b1:df:3a:
         c2:ea:17:be

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Related Certificates

• lets-encrypt-e1.der: CN=E1,O=Let’s Encrypt,C=US (Expiring: 2025-09-15)
• lets-encrypt-e2.der: CN=E2,O=Let’s Encrypt,C=US (Expiring: 2025-09-15)
• isrg-root-ocsp-x1.der: CN=ISRG Root OCSP X1,O=Internet Security Research Group,C=US (Expiring: 2025-06-10)
• isrg-root-x1-cross-signed.der: CN=ISRG Root X1,O=Internet Security Research Group,C=US (Expiring: 2024-09-30)
• isrgrootx1.der: CN=ISRG Root X1,O=Internet Security Research Group,C=US (Expiring: 2035-06-04)
• isrg-root-x2-cross-signed.der: CN=ISRG Root X2,O=Internet Security Research Group,C=US (Expiring: 2025-09-15)
• isrg-root-x2.der: CN=ISRG Root X2,O=Internet Security Research Group,C=US (Expiring: 2040-09-17)
• lets-encrypt-x1-cross-signed.der: CN=Let’s Encrypt Authority X1,O=Let’s Encrypt,C=US (Expiring: 2020-10-19)
• letsencryptauthorityx1.der: CN=Let’s Encrypt Authority X1,O=Let’s Encrypt,C=US (Expiring: 2020-06-04)
• lets-encrypt-x2-cross-signed.der: CN=Let’s Encrypt Authority X2,O=Let’s Encrypt,C=US (Expiring: 2020-10-19)
• letsencryptauthorityx2.der: CN=Let’s Encrypt Authority X2,O=Let’s Encrypt,C=US (Expiring: 2020-06-04)
• http://cert.int-x3.letsencrypt.org/: CN=Let’s Encrypt Authority X3,O=Let’s Encrypt,C=US (Expiring: 2021-03-17)
• lets-encrypt-x3-cross-signed.der: CN=Let’s Encrypt Authority X3,O=Let’s Encrypt,C=US (Expiring: 2021-03-17)
• letsencryptauthorityx3.der: CN=Let’s Encrypt Authority X3,O=Let’s Encrypt,C=US (Expiring: 2021-10-06)
• lets-encrypt-x4-cross-signed.der: CN=Let’s Encrypt Authority X4,O=Let’s Encrypt,C=US (Expiring: 2021-03-17)
• letsencryptauthorityx4.der: CN=Let’s Encrypt Authority X4,O=Let’s Encrypt,C=US (Expiring: 2021-10-06)
• lets-encrypt-r3.der: CN=R3,O=Let’s Encrypt,C=US (Expiring: 2025-09-15)
• lets-encrypt-r4-cross-signed.der: CN=R4,O=Let’s Encrypt,C=US (Expiring: 2021-09-29)
• lets-encrypt-r4.der: CN=R4,O=Let’s Encrypt,C=US (Expiring: 2025-09-15)