RapidSSLRSACA2018.crt: CN=RapidSSL RSA CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2027-11-06) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/RapidSSLRSACA2018.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/RapidSSLRSACA2018.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a5:a2:46:cd:4b:5c:8c:83:d7:02:b4:bb:ab:53:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Nov  6 12:23:33 2017 GMT
            Not After : Nov  6 12:23:33 2027 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=RapidSSL RSA CA 2018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2d:a8:8a:11:28:f6:79:e9:7b:3a:33:88:3b:
                    71:e1:65:8b:2c:29:65:fd:ed:2d:d4:46:1e:98:4e:
                    67:f8:c8:0f:e6:f8:9a:1c:bc:be:56:91:cf:fa:77:
                    57:e4:3d:7c:20:d2:2e:b8:05:7c:c0:5a:b6:e8:a1:
                    79:53:45:8d:21:98:90:a7:a9:8b:b4:85:a3:51:e5:
                    83:3c:0d:bc:39:ec:a1:4e:58:fd:4c:b9:36:6d:ec:
                    ad:6e:d1:54:eb:2a:5b:a5:65:25:b6:6b:d8:e5:5f:
                    27:82:ca:42:ee:71:51:34:28:e9:7e:70:c4:0f:69:
                    11:c8:9c:ce:f3:2a:0a:30:5c:f8:27:82:44:f0:de:
                    cd:03:5b:89:c1:41:05:31:4b:c7:2e:cd:2c:70:ba:
                    0f:66:42:9c:7b:02:11:9b:54:55:d8:0c:66:15:0c:
                    49:91:d7:fb:60:df:4f:72:49:22:7f:65:e0:9b:76:
                    f8:f0:16:67:d3:37:f4:a9:7b:12:78:6b:bc:e2:e6:
                    bd:83:0c:e3:cc:8e:ed:6d:30:63:6b:24:e9:4f:ef:
                    d7:a5:6b:81:56:fe:9f:bd:aa:c8:e9:b8:a4:28:1f:
                    39:f4:e4:86:42:ec:3b:dd:75:e0:7a:e1:70:10:f1:
                    d3:21:1a:14:b6:4c:ee:df:f1:10:f8:bb:70:ce:79:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                53:CA:17:59:FC:6B:C0:03:21:2F:1A:AE:E4:AA:A8:1C:82:56:DA:75
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.1.2
                  CPS: https://www.digicert.com/CPS
                Policy: 2.16.840.1.114412.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2

    Signature Algorithm: sha256WithRSAEncryption
         7e:23:c7:f2:ca:35:6e:59:92:51:5c:61:6b:3c:12:36:e6:d2:
         7c:b3:29:e6:42:d8:a3:95:61:1e:cf:f2:07:af:2b:2b:25:5a:
         6e:17:a3:80:52:cc:aa:f6:df:91:6c:27:86:85:b7:ac:80:8a:
         fd:5e:63:4b:59:fd:93:75:f1:b3:86:48:64:ad:a0:47:3f:24:
         4e:28:70:8c:eb:f0:fe:4c:83:5d:64:45:81:db:9a:06:27:af:
         54:71:7a:48:b9:99:27:9b:df:d0:c6:c5:3a:49:0f:89:06:86:
         ce:65:5c:da:28:e1:ca:27:52:28:89:c0:a6:aa:1f:bb:e1:d9:
         b6:ab:c9:df:29:30:84:9a:83:cd:c9:52:ac:95:19:cd:ad:58:
         fa:4e:d3:7d:bd:fc:25:aa:da:4a:f2:aa:fe:ba:39:23:23:c2:
         e9:54:cf:47:57:7f:83:87:41:ab:11:ec:23:5f:22:bf:b8:29:
         27:1c:e8:00:65:43:94:43:17:ce:8f:19:e1:3a:91:dc:12:42:
         41:62:07:f7:10:ca:c3:72:ab:48:c4:0d:04:e4:7d:ad:a9:8e:
         6b:96:b4:c0:8d:6c:19:e1:15:70:58:7a:37:ee:6c:88:5a:51:
         b1:2f:d8:53:90:07:77:42:6a:ff:85:3e:0e:5e:12:f7:97:4d:
         5c:8c:9c:6a

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06