DigiCertAssuredIDTLSCA.crt: CN=DigiCert Assured ID TLS CA,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2030-02-09) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/DigiCertAssuredIDTLSCA.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/DigiCertAssuredIDTLSCA.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:55:67:55:d7:ad:03:b1:d3:12:03:d1:f2:b7:5f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
        Validity
            Not Before: Feb  9 12:32:07 2018 GMT
            Not After : Feb  9 12:32:07 2030 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID TLS CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:34:96:91:07:a7:2b:f8:20:b0:e9:e1:58:5f:
                    60:13:76:85:36:9e:32:c8:37:66:53:be:16:45:94:
                    7d:35:92:a1:21:7b:78:fd:96:5a:fc:bd:0f:34:97:
                    56:d9:83:c1:11:b4:92:29:ed:d7:a8:e0:9b:3d:27:
                    64:3d:67:59:2f:ff:26:73:2b:0d:77:95:a4:3c:73:
                    a8:6c:c9:40:ed:65:0b:66:90:3a:53:45:08:31:0f:
                    7a:ec:19:25:ba:8e:70:8c:8a:89:a5:d2:92:52:65:
                    41:1b:2e:ac:a5:8e:9f:39:76:db:b6:5d:6c:30:2b:
                    32:0f:fe:f7:ee:00:75:ad:ee:78:e7:6b:7e:2e:17:
                    92:a5:4e:4e:ff:43:d6:28:be:03:8a:f6:27:75:53:
                    0e:48:3c:3e:25:f4:7b:af:e6:a3:d7:b9:c8:16:a3:
                    ed:92:2b:d8:7b:8c:c1:54:00:99:f3:27:a7:59:d5:
                    04:ad:bd:15:35:c0:db:86:d3:6a:e0:1d:7c:64:46:
                    df:90:df:6d:99:e2:51:97:bf:ee:bf:3e:74:c7:e0:
                    a9:93:cd:d4:96:b2:12:71:19:2d:74:53:ea:75:6e:
                    c6:34:d6:8a:a1:30:2c:7b:ac:99:57:e4:36:be:0a:
                    1d:de:65:33:bf:5d:71:6e:bc:ed:85:93:22:7b:a1:
                    1c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                16:D2:78:E4:E8:83:8D:C3:6E:01:7D:F9:CE:3B:CD:83:95:0A:04:E0
            X509v3 Authority Key Identifier: 
                keyid:45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: http://www.digicert.com/CPS

    Signature Algorithm: sha256WithRSAEncryption
         12:13:13:5b:d1:99:86:c8:8e:eb:a0:fe:0e:87:1e:bb:60:51:
         6a:66:69:68:58:ff:1e:22:5b:0d:c5:f6:db:88:76:45:5c:9f:
         36:7e:16:9c:b2:ca:b1:77:0a:53:90:1a:b6:85:da:0f:04:e7:
         ae:4a:11:74:38:88:3e:ad:b7:ca:4e:ce:af:af:b9:e2:29:19:
         9e:b2:08:fc:da:8e:22:6a:bf:fd:62:f9:c8:5c:ad:ae:6e:69:
         59:c3:b1:4e:31:79:68:80:45:78:9c:99:05:9e:16:fa:41:45:
         e4:65:6f:52:ea:49:2a:73:85:a0:c8:7e:3f:24:6d:5e:01:f7:
         af:06:7b:05:3a:0e:5c:fb:3b:1f:af:4c:80:18:e8:bd:f1:89:
         65:74:f7:45:62:82:e2:7b:f0:d3:c2:3b:4f:41:3f:6d:3e:97:
         60:82:7f:cf:9f:e5:aa:ef:cb:02:9f:88:17:59:53:21:cf:97:
         22:64:29:29:14:97:54:95:0d:b1:b6:41:d7:d0:23:15:a3:73:
         4f:9d:59:10:ba:4e:ab:b4:2a:9b:2e:0f:b1:ce:fd:17:9f:a0:
         22:2b:16:e0:13:38:d5:cb:b8:dd:1b:aa:b6:f8:d9:27:c2:91:
         90:e1:8c:73:9c:48:a4:a6:55:18:64:d0:1b:ac:73:34:59:28:
         c5:b1:df:d0

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06