R3-ServerCA3B.cer: CN=Amazon,OU=Server CA 3B,O=Amazon,C=US (Intermediate Certificate, Expiring 2028-07-16) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: https://www.amazontrust.com/repository/R3-ServerCA3B.cer (in DER format )
Serial Number : 153177878782232859375223032513834700059899758
SHA-1 Fingerprint : 6c787156ae214cf4b04483ac4f45522c6ea504c1
SHA-1 Fingerprint : 6c:78:71:56:ae:21:4c:f4:b0:44:83:ac:4f:45:52:2c:6e:a5:04:c1
SHA-256 Fingerprint : ecc295b6ddcd084ba7179fb53bdd1d422cb6c0a8d94f154d4a5b17780b7279ed
SHA-256 Fingerprint : ec:c2:95:b6:dd:cd:08:4b:a7:17:9f:b5:3b:dd:1d:42:2c:b6:c0:a8:d9:4f:15:4d:4a:5b:17:78:0b:72:79:ed
Signature Hash Algorithm : sha256
Subject : CN=Amazon,OU=Server CA 3B,O=Amazon,C=US
- Country Name: US (United States of America)
- Organization: Amazon
- Organization Unit: Server CA 3B
- Common Name: Amazon
Not Valid Before: 2018-07-16 22:06:27
Not Valid After: 2028-07-16 22:06:27
Issuer (Parent Certificate):
- Issuer Name: CN=Amazon Root CA 3,O=Amazon,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: https://www.digicert.com/content/dam/digicert/pdfs/legal/digicert-cp-v5-12-Final.pdf
- Certificate Practice Statement (CPS) URL: https://www.digicert.com/content/dam/digicert/pdfs/legal/digicert-cps-v5-12-Final.pdf
- Auditor: BDO International Limited
- Standard Audit URL: https://bugzilla.mozilla.org/attachment.cgi?id=9309728
- Standard Audit Period Start Date: 2021.10.01
- Standard Audit Period End Date: 2022.09.30
- Standard Audit Statement Date: 2022.12.22
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: http://crl.sca3b.amazontrust.com/sca3b.crl
- Check its issuer’s audit information: CN=Amazon Root CA 3,O=Amazon,C=US .

Download certificate through curl:

curl -sSL "https://www.amazontrust.com/repository/R3-ServerCA3B.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.amazontrust.com/repository/R3-ServerCA3B.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:de:65:53:f4:71:2a:18:31:2d:fd:a2:b4:84:6d:1b:36:f7:6e
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, O=Amazon, CN=Amazon Root CA 3
        Validity
            Not Before: Jul 16 22:06:27 2018 GMT
            Not After : Jul 16 22:06:27 2028 GMT
        Subject: C=US, O=Amazon, OU=Server CA 3B, CN=Amazon
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:f9:e3:ee:6c:0d:51:53:27:55:62:66:68:f8:43:
                    a6:19:34:3b:53:5b:d5:e7:32:8e:c6:b9:1d:b7:4c:
                    48:16:71:45:a7:a9:c8:42:d6:d2:76:bd:41:0c:25:
                    4f:52:24:7d:f2:59:67:8d:a7:ca:f1:8a:21:1a:89:
                    44:63:db:bf:ef
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                AE:5C:80:FF:42:97:C9:C3:A0:9B:65:0B:04:CE:9E:71:7F:3E:CE:5A
            X509v3 Authority Key Identifier: 
                keyid:AB:B6:DB:D7:06:9E:37:AC:30:86:07:91:70:C7:9C:C4:19:B1:78:C0

            Authority Information Access: 
                OCSP - URI:http://ocsp.rootca3.amazontrust.com
                CA Issuers - URI:http://crt.rootca3.amazontrust.com/rootca3.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.rootca3.amazontrust.com/rootca3.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:21:00:b8:73:ae:68:a7:25:07:85:34:43:86:0b:d2:
         4b:5b:39:72:9d:3f:b7:b8:17:7a:7e:5a:fe:a0:2f:86:88:1f:
         7b:02:20:2f:d9:0b:10:8f:13:a2:b0:db:7b:fa:2d:c3:5a:b3:
         d6:67:9a:8a:71:a7:73:85:42:29:6a:9e:58:9c:69:91:72

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates