Amazon-ECDSA-256-M03.cer: CN=Amazon ECDSA 256 M03,O=Amazon,C=US (Intermediate Certificate, Expiring 2030-08-23) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: https://www.amazontrust.com/repository/Amazon-ECDSA-256-M03.cer (in DER format )
Serial Number : 166129403547197670966710125579558647153428493
SHA-1 Fingerprint : 8a13a203bca27ac75fcf7718b834a194145ee426
SHA-1 Fingerprint : 8a:13:a2:03:bc:a2:7a:c7:5f:cf:77:18:b8:34:a1:94:14:5e:e4:26
SHA-256 Fingerprint : 493e78eee8cca1f26e6494ed924985af3fa9e6110eaa61c3214e8d73b4047316
SHA-256 Fingerprint : 49:3e:78:ee:e8:cc:a1:f2:6e:64:94:ed:92:49:85:af:3f:a9:e6:11:0e:aa:61:c3:21:4e:8d:73:b4:04:73:16
Signature Hash Algorithm : sha256
Subject : CN=Amazon ECDSA 256 M03,O=Amazon,C=US
- Country Name: US (United States of America)
- Organization: Amazon
- Common Name: Amazon ECDSA 256 M03
Not Valid Before: 2022-08-23 22:33:55
Not Valid After: 2030-08-23 22:33:55
Issuer (Parent Certificate):
- Issuer Name: CN=Amazon Root CA 3,O=Amazon,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: https://www.digicert.com/content/dam/digicert/pdfs/legal/digicert-cp-v5-12-Final.pdf
- Certificate Practice Statement (CPS) URL: https://www.digicert.com/content/dam/digicert/pdfs/legal/digicert-cps-v5-12-Final.pdf
- Auditor: BDO International Limited
- Standard Audit URL: https://bugzilla.mozilla.org/attachment.cgi?id=9309728
- Standard Audit Period Start Date: 2021.10.01
- Standard Audit Period End Date: 2022.09.30
- Standard Audit Statement Date: 2022.12.22
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: http://crl.e2m03.amazontrust.com/e2m03.crl
- Check its issuer’s audit information: CN=Amazon Root CA 3,O=Amazon,C=US .

Download certificate through curl:

curl -sSL "https://www.amazontrust.com/repository/Amazon-ECDSA-256-M03.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.amazontrust.com/repository/Amazon-ECDSA-256-M03.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:73:12:70:3d:79:51:fd:4e:b2:d7:3c:ab:82:6a:fb:aa:08:0d
    Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, O=Amazon, CN=Amazon Root CA 3
        Validity
            Not Before: Aug 23 22:33:55 2022 GMT
            Not After : Aug 23 22:33:55 2030 GMT
        Subject: C=US, O=Amazon, CN=Amazon ECDSA 256 M03
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:1b:f7:23:7f:7e:eb:35:59:1b:49:5a:1c:75:45:
                    ea:90:67:9f:d9:29:0a:26:73:e8:02:55:e0:5a:56:
                    cf:61:d1:b8:6e:16:a9:95:de:a3:56:15:26:d0:51:
                    49:d8:15:04:55:03:b7:f7:e9:60:e8:a6:b1:12:c6:
                    f1:75:63:fc:40
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Key Identifier: 
                CB:23:C3:F3:02:73:6F:BA:C1:A4:AD:F8:71:C6:10:28:16:DF:EC:BF
            X509v3 Authority Key Identifier: 
                keyid:AB:B6:DB:D7:06:9E:37:AC:30:86:07:91:70:C7:9C:C4:19:B1:78:C0

            Authority Information Access: 
                OCSP - URI:http://ocsp.rootca3.amazontrust.com
                CA Issuers - URI:http://crt.rootca3.amazontrust.com/rootca3.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.rootca3.amazontrust.com/rootca3.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1

    Signature Algorithm: ecdsa-with-SHA256
         30:46:02:21:00:c0:63:8f:a9:ed:a7:c5:b7:6d:63:08:89:86:
         5e:24:00:28:9f:ec:a2:fe:e5:c3:f0:d7:fc:eb:55:de:92:8a:
         c2:02:21:00:c5:d7:a8:0b:98:ac:e3:1d:75:a1:f5:92:4d:6d:
         8a:fa:ab:60:4b:0d:ec:27:d0:5f:02:9b:0a:43:96:34:83:d6

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates