DigiCertSHA2SecureServerCA-2.crt: CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2030-09-22) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: https://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt (in DER format )
Serial Number : 3261708894152296593076398650851921056
SHA-1 Fingerprint : 626d44e704d1ceabe3bf0d53397464ac8080142c
SHA-1 Fingerprint : 62:6d:44:e7:04:d1:ce:ab:e3:bf:0d:53:39:74:64:ac:80:80:14:2c
SHA-256 Fingerprint : c1ad7778796d20bca65c889a2655021156528bb62ff5fa43e1b8e5a83e3d2eaa
SHA-256 Fingerprint : c1:ad:77:78:79:6d:20:bc:a6:5c:88:9a:26:55:02:11:56:52:8b:b6:2f:f5:fa:43:e1:b8:e5:a8:3e:3d:2e:aa
Signature Hash Algorithm : sha256
Subject : CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US
- Country Name: US (United States of America)
- Organization: DigiCert Inc
- Common Name: DigiCert SHA2 Secure Server CA
Not Valid Before: 2020-09-23 00:00:00
Not Valid After: 2030-09-22 23:59:59
Issuer (Parent Certificate):
- Issuer Name: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: Unknown
- No public standard audit information was found by E2Encrypted.com. We update this information regularly, check back later.
- Check its issuer’s audit information: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US .

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:74:2e:aa:17:ca:8e:21:c7:17:bb:1f:fc:fd:0c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Sep 23 00:00:00 2020 GMT
            Not After : Sep 22 23:59:59 2030 GMT
        Subject: C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ae:58:90:4d:c1:c4:30:15:90:35:5b:6e:3c:
                    82:15:f5:2c:5c:bd:e3:db:ff:71:43:fa:64:25:80:
                    d4:ee:18:a2:4d:f0:66:d0:0a:73:6e:11:98:36:17:
                    64:af:37:9d:fd:fa:41:84:af:c7:af:8c:fe:1a:73:
                    4d:cf:33:97:90:a2:96:87:53:83:2b:b9:a6:75:48:
                    2d:1d:56:37:7b:da:31:32:1a:d7:ac:ab:06:f4:aa:
                    5d:4b:b7:47:46:dd:2a:93:c3:90:2e:79:80:80:ef:
                    13:04:6a:14:3b:b5:9b:92:be:c2:07:65:4e:fc:da:
                    fc:ff:7a:ae:dc:5c:7e:55:31:0c:e8:39:07:a4:d7:
                    be:2f:d3:0b:6a:d2:b1:df:5f:fe:57:74:53:3b:35:
                    80:dd:ae:8e:44:98:b3:9f:0e:d3:da:e0:d7:f4:6b:
                    29:ab:44:a7:4b:58:84:6d:92:4b:81:c3:da:73:8b:
                    12:97:48:90:04:45:75:1a:dd:37:31:97:92:e8:cd:
                    54:0d:3b:e4:c1:3f:39:5e:2e:b8:f3:5c:7e:10:8e:
                    86:41:00:8d:45:66:47:b0:a1:65:ce:a0:aa:29:09:
                    4e:f3:97:eb:e8:2e:ab:0f:72:a7:30:0e:fa:c7:f4:
                    fd:14:77:c3:a4:5b:28:57:c2:b3:f9:82:fd:b7:45:
                    58:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0F:80:61:1C:82:31:61:D5:2F:28:E7:8D:46:38:B4:2C:E1:C6:D9:E2
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootCA.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootCA.crl

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
                Policy: 2.23.140.1.2.3

    Signature Algorithm: sha256WithRSAEncryption
         77:31:1f:08:97:d7:12:9b:63:d2:11:65:08:a6:f6:65:b9:b8:
         fa:92:03:cb:a1:7e:e1:c8:0d:8c:3e:b4:1b:91:be:02:08:5e:
         9f:59:71:7b:11:fd:e0:c0:e3:8f:59:d7:a0:52:a1:d0:4b:54:
         d2:48:96:48:ef:77:e9:29:06:cb:43:10:a0:2f:3c:16:8e:2d:
         fe:1e:55:3c:ec:c3:98:ee:18:0d:23:e8:07:f5:b3:2d:c4:ab:
         57:73:5a:f6:1b:53:ba:fb:1f:fa:bd:8c:d3:51:51:20:47:5e:
         ef:7f:98:ab:17:42:ca:85:5c:9f:22:37:34:45:76:f2:43:5e:
         00:9e:22:83:ac:df:af:d1:e6:c7:13:17:e9:a4:69:64:4c:80:
         67:ea:b6:a4:7f:8f:7d:e1:51:fa:9e:97:67:ea:69:2e:b3:90:
         a4:1c:15:c8:ac:cb:4f:29:ec:7a:5c:5d:9f:8a:b8:d4:0c:bb:
         94:ee:d0:bc:cb:b5:a5:1e:08:cf:c4:41:03:0d:bd:06:c3:a0:
         f4:c8:37:55:4a:f1:bf:e5:79:42:35:ab:41:98:ef:fc:13:39:
         c3:bb:5b:eb:ef:63:7c:80:9c:c8:49:46:70:6b:a0:82:50:3e:
         d0:04:b6:ca:25:c5:c1:05:55:5f:f2:7c:2f:57:d1:af:95:6f:
         ac:6d:79:6b

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates