Amazon-ECDSA-256-M01.cer: CN=Amazon ECDSA 256 M01,O=Amazon,C=US (Intermediate Certificate, Expiring 2030-08-23) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: https://www.amazontrust.com/repository/Amazon-ECDSA-256-M01.cer (in DER format )
Serial Number : 166129390625439763759333646661149398014426255
SHA-1 Fingerprint : 8813529e304ae17676f9d4a6907e69150250f6f8
SHA-1 Fingerprint : 88:13:52:9e:30:4a:e1:76:76:f9:d4:a6:90:7e:69:15:02:50:f6:f8
SHA-256 Fingerprint : 332b101539fa89ca4e228719fe5287ab6869af31ab21cbf110f5dd3c5994c1c7
SHA-256 Fingerprint : 33:2b:10:15:39:fa:89:ca:4e:22:87:19:fe:52:87:ab:68:69:af:31:ab:21:cb:f1:10:f5:dd:3c:59:94:c1:c7
Signature Hash Algorithm : sha256
Subject : CN=Amazon ECDSA 256 M01,O=Amazon,C=US
- Country Name: US (United States of America)
- Organization: Amazon
- Common Name: Amazon ECDSA 256 M01
Not Valid Before: 2022-08-23 22:31:46
Not Valid After: 2030-08-23 22:31:46
Issuer (Parent Certificate):
- Issuer Name: CN=Amazon Root CA 3,O=Amazon,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: https://www.digicert.com/content/dam/digicert/pdfs/legal/digicert-cp-v5-12-Final.pdf
- Certificate Practice Statement (CPS) URL: https://www.digicert.com/content/dam/digicert/pdfs/legal/digicert-cps-v5-12-Final.pdf
- Auditor: BDO International Limited
- Standard Audit URL: https://bugzilla.mozilla.org/attachment.cgi?id=9309728
- Standard Audit Period Start Date: 2021.10.01
- Standard Audit Period End Date: 2022.09.30
- Standard Audit Statement Date: 2022.12.22
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: http://crl.e2m01.amazontrust.com/e2m01.crl
- Check its issuer’s audit information: CN=Amazon Root CA 3,O=Amazon,C=US .

Download certificate through curl:

curl -sSL "https://www.amazontrust.com/repository/Amazon-ECDSA-256-M01.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.amazontrust.com/repository/Amazon-ECDSA-256-M01.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:73:12:66:84:d5:77:c0:fc:f8:d3:a3:42:be:a8:6f:94:fc:8f
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, O=Amazon, CN=Amazon Root CA 3
        Validity
            Not Before: Aug 23 22:31:46 2022 GMT
            Not After : Aug 23 22:31:46 2030 GMT
        Subject: C=US, O=Amazon, CN=Amazon ECDSA 256 M01
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:fc:d3:0f:b6:47:03:47:cf:25:e6:55:43:3f:39:
                    42:81:66:92:64:4f:31:f2:08:a0:e5:e2:c0:6b:51:
                    f8:f3:56:3a:2d:fe:53:5b:6b:d9:18:cc:c2:92:1d:
                    8b:fd:e4:25:03:a0:c6:85:da:1d:8a:02:ac:7a:e6:
                    e2:d0:63:c6:a0
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Key Identifier: 
                4F:59:FC:BC:06:16:28:BF:A2:C8:DB:08:FB:CF:13:24:BA:69:42:5C
            X509v3 Authority Key Identifier: 
                keyid:AB:B6:DB:D7:06:9E:37:AC:30:86:07:91:70:C7:9C:C4:19:B1:78:C0

            Authority Information Access: 
                OCSP - URI:http://ocsp.rootca3.amazontrust.com
                CA Issuers - URI:http://crt.rootca3.amazontrust.com/rootca3.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.rootca3.amazontrust.com/rootca3.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1

    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:21:00:b4:5f:c6:ad:d2:40:88:63:e7:10:38:4b:95:
         00:63:f2:a5:2a:a6:b2:64:3a:67:6c:17:42:0c:7f:0a:aa:67:
         ff:02:20:14:55:97:5d:00:b7:9f:9e:a4:5e:fa:27:f1:37:61:
         54:a7:8e:b5:2c:be:bf:72:05:4c:10:7d:d3:cb:6e:df:d5

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates