ThawtePCA-G2.crt: CN=thawte Primary Root CA - G2,OU=(c) 2007 thawte, Inc. - For authorized use only,O=thawte, Inc.,C=US (Intermediate Certificate, Expiring 2038-01-18) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: https://cacerts.digicert.com/ThawtePCA-G2.crt (in DER format )
Serial Number : 71758320672825410020661621085256472406
SHA-1 Fingerprint : aadbbc22238fc401a127bb38ddf41ddb089ef012
SHA-1 Fingerprint : aa:db:bc:22:23:8f:c4:01:a1:27:bb:38:dd:f4:1d:db:08:9e:f0:12
SHA-256 Fingerprint : a4310d50af18a6447190372a86afaf8b951ffb431d837f1e5688b45971ed1557
SHA-256 Fingerprint : a4:31:0d:50:af:18:a6:44:71:90:37:2a:86:af:af:8b:95:1f:fb:43:1d:83:7f:1e:56:88:b4:59:71:ed:15:57
Signature Hash Algorithm : sha384
Subject : CN=thawte Primary Root CA - G2,OU=(c) 2007 thawte, Inc. - For authorized use only,O=thawte, Inc.,C=US
- Country Name: US (United States of America)
- Organization: thawte, Inc.
- Organization Unit: (c) 2007 thawte, Inc. - For authorized use only
- Common Name: thawte Primary Root CA - G2
Not Valid Before: 2007-11-05 00:00:00
Not Valid After: 2038-01-18 23:59:59
Issuer (Parent Certificate):
- Issuer Name: CN=thawte Primary Root CA - G2,OU=(c) 2007 thawte, Inc. - For authorized use only,O=thawte, Inc.,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Unknown
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: https://www.digicert.com/content/dam/digicert/pdfs/legal/DigiCert-CPS-V.5.5.pdf
- Auditor: BDO International Limited
- Standard Audit URL: https://bugzilla.mozilla.org/attachment.cgi?id=9216269
- Standard Audit Period Start Date: 2020.10.01
- Standard Audit Period End Date: 2021.01.17
- Standard Audit Statement Date: 2021.04.14
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: Unknown
- Check its issuer’s audit information: CN=thawte Primary Root CA - G2,OU=(c) 2007 thawte, Inc. - For authorized use only,O=thawte, Inc.,C=US .

Download certificate through curl:

curl -sSL "https://cacerts.digicert.com/ThawtePCA-G2.crt" --output cert.crt

Download certificate through wget:

wget -q "https://cacerts.digicert.com/ThawtePCA-G2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fc:26:5c:d9:84:4f:c9:3d:26:3d:57:9b:ae:d7:56
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=thawte, Inc., OU=(c) 2007 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G2
        Validity
            Not Before: Nov  5 00:00:00 2007 GMT
            Not After : Jan 18 23:59:59 2038 GMT
        Subject: C=US, O=thawte, Inc., OU=(c) 2007 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G2
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:a2:d5:9c:82:7b:95:9d:f1:52:78:87:fe:8a:16:
                    bf:05:e6:df:a3:02:4f:0d:07:c6:00:51:ba:0c:02:
                    52:2d:22:a4:42:39:c4:fe:8f:ea:c9:c1:be:d4:4d:
                    ff:9f:7a:9e:e2:b1:7c:9a:ad:a7:86:09:73:87:d1:
                    e7:9a:e3:7a:a5:aa:6e:fb:ba:b3:70:c0:67:88:a2:
                    35:d4:a3:9a:b1:fd:ad:c2:ef:31:fa:a8:b9:f3:fb:
                    08:c6:91:d1:fb:29:95
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                9A:D8:00:30:00:E7:6B:7F:85:18:EE:8B:B6:CE:8A:0C:F8:11:E1:BB
    Signature Algorithm: ecdsa-with-SHA384
         30:66:02:31:00:dd:f8:e0:57:47:5b:a7:e6:0a:c3:bd:f5:80:
         8a:97:35:0d:1b:89:3c:54:86:77:28:ca:a1:f4:79:de:b5:e6:
         38:b0:f0:65:70:8c:7f:02:54:c2:bf:ff:d8:a1:3e:d9:cf:02:
         31:00:c4:8d:94:fc:dc:53:d2:dc:9d:78:16:1f:15:33:23:53:
         52:e3:5a:31:5d:9d:ca:ae:bd:13:29:44:0d:27:5b:a8:e7:68:
         9c:12:f7:58:3f:2e:72:02:57:a3:8f:a1:14:2e