DigiCertBaltimoreCA-1G2.crt: CN=DigiCert Baltimore CA-1 G2,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2025-05-10) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/DigiCertBaltimoreCA-1G2.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/DigiCertBaltimoreCA-1G2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:da:0d:ec:a7:35:a1:bc:5c:36:d5:1e:d5:ea:d7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
        Validity
            Not Before: Oct 14 12:00:00 2015 GMT
            Not After : May 10 12:00:00 2025 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Baltimore CA-1 G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:16:3c:7a:54:ae:39:f4:24:c6:70:52:30:2f:
                    ba:ed:d3:c4:1b:e5:51:58:99:c5:d4:00:2f:ea:39:
                    ac:ae:88:eb:d0:ce:bc:4e:5b:8c:4b:c8:d7:d9:2d:
                    69:09:65:98:30:be:ea:66:51:e6:06:f0:0a:3a:ea:
                    a8:b4:a2:9a:84:a9:65:ed:18:6e:5e:23:0f:7d:c0:
                    4d:13:83:8f:3e:a6:14:c1:e6:93:f7:16:00:97:88:
                    dd:91:3b:bd:d1:f1:ee:91:00:06:f4:b6:16:c4:ad:
                    8f:40:29:d1:5e:b1:ab:56:09:dd:4c:de:9d:59:59:
                    d8:ef:8c:8b:61:53:17:b8:9a:e7:dc:3e:c6:b3:16:
                    2f:7a:a0:38:a7:33:f3:91:4c:b7:8e:10:20:10:99:
                    78:2c:5d:17:5e:d9:f6:95:13:00:94:f8:ea:a5:55:
                    34:16:9e:0d:63:7d:ad:dc:ce:d4:3b:68:2d:1f:a5:
                    e0:ea:bc:48:40:b8:9e:aa:08:ce:da:71:91:25:7a:
                    32:4a:92:47:8d:d2:b1:9b:ed:43:8c:b3:b0:7c:74:
                    c9:fc:97:03:f1:b4:a9:b7:79:f7:32:5c:09:f7:97:
                    26:e0:a0:e0:38:b2:8e:84:d5:ca:39:2c:67:10:b7:
                    54:10:a7:65:b3:c5:ac:ad:c2:ca:94:c0:e0:86:36:
                    09:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/Omniroot2025.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://www.digicert.com/CPS

            X509v3 Subject Key Identifier: 
                B6:F9:48:50:48:6F:F3:9F:EB:BE:53:BA:27:89:4E:75:9A:B4:BD:67
            X509v3 Authority Key Identifier: 
                keyid:E5:9D:59:30:82:47:58:CC:AC:FA:08:54:36:86:7B:3A:B5:04:4D:F0

    Signature Algorithm: sha256WithRSAEncryption
         8b:cc:48:9b:f8:6a:ec:dc:83:2d:60:d8:ae:ed:e7:63:bd:df:
         56:77:b6:56:f8:ad:55:09:36:4e:bd:c2:8d:5d:26:a1:0a:79:
         55:9f:af:65:0f:69:a7:12:f6:80:59:60:04:e0:c6:3b:44:1e:
         6b:bc:70:70:46:bf:a0:5e:c7:8b:22:4f:df:94:ac:67:73:0a:
         72:98:b5:8c:1a:b3:d6:48:5a:41:f5:10:07:b9:de:1d:64:6a:
         cf:ed:e2:04:13:97:f2:59:37:12:bc:a2:67:54:05:27:74:cf:
         f7:a0:47:c6:65:ce:c8:60:df:24:9d:55:df:eb:71:a6:56:10:
         56:bc:ad:14:2f:03:07:e8:34:ba:07:a6:c7:9c:65:79:85:c0:
         50:24:9a:ee:68:76:cb:dd:7f:25:c4:22:61:a8:d6:01:5e:2f:
         25:0e:00:a2:63:48:cc:fd:ce:c4:97:07:15:63:ea:3f:d8:82:
         53:d1:b0:5b:95:f7:c6:ba:b0:a1:39:63:4e:ef:45:15:96:0b:
         f2:87:16:07:24:a9:4e:a1:1e:69:3b:0e:95:da:22:c5:6c:97:
         65:14:eb:95:ba:2d:dc:99:f1:c0:df:d4:32:a5:3a:b2:aa:83:
         5e:9c:d0:b9:0b:b6:d4:0d:3a:74:bd:8e:05:89:26:82:63:37:
         49:b8:79:2e

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06