SecureSiteExtendedValidationCAG2.crt: CN=Secure Site Extended Validation CA G2,OU=www.digicert.com,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2029-06-20) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://crl.digicert-cn.com/SecureSiteExtendedValidationCAG2.crt" --output cert.crt

Download certificate through wget:

wget -q "http://crl.digicert-cn.com/SecureSiteExtendedValidationCAG2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a8:54:09:5a:52:6c:42:78:c7:5b:47:46:1e:09:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
        Validity
            Not Before: Jun 20 12:21:59 2019 GMT
            Not After : Jun 20 12:21:59 2029 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Secure Site Extended Validation CA G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:e8:c7:5e:81:4f:d8:69:6c:66:5c:9f:66:
                    61:cb:d8:e6:16:e2:a9:16:76:db:53:6a:fa:96:86:
                    83:dc:10:2e:75:73:c3:bb:69:6e:2b:1b:08:a4:39:
                    b3:8b:67:85:d8:76:f0:99:6a:ae:0a:81:f6:09:de:
                    52:a9:88:4d:02:36:9b:37:85:c8:7d:36:72:39:8a:
                    0e:30:71:8f:c3:22:b2:0d:25:77:41:95:57:c7:0d:
                    54:63:ca:68:9d:bf:00:f0:a6:1e:a4:9f:6d:3c:32:
                    6c:35:a6:7f:76:6a:eb:96:58:19:32:55:1d:b0:5e:
                    bb:b5:fc:7e:8a:80:d7:d0:f6:26:6f:42:3b:40:ac:
                    b4:ef:1f:cf:dd:a9:99:e6:db:b5:1c:47:f0:bf:f9:
                    c0:bb:c7:22:b6:be:d3:15:c9:fb:39:f2:4f:64:e8:
                    9b:68:4d:b1:8b:f8:3e:46:58:4d:80:1b:c3:1d:61:
                    39:99:da:15:73:cf:e3:c5:f4:db:31:37:a1:52:40:
                    1f:e4:38:e7:c4:8f:9b:31:fa:db:26:c2:a2:1f:3a:
                    92:7c:dc:4c:99:48:ff:ad:99:45:67:e4:15:ee:16:
                    f9:5a:79:06:e9:da:a9:90:ba:e5:1b:91:0e:04:d5:
                    89:27:07:20:3a:85:c1:58:2c:70:08:8f:17:f0:c0:
                    d8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A9:3B:BA:7A:58:95:48:35:FE:D6:07:9D:2B:8B:25:FE:6A:E1:DB:A0
            X509v3 Authority Key Identifier: 
                keyid:B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            Authority Information Access: 
                OCSP - URI:http://ocsp.dcocsp.cn

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.digicert-cn.com/DigiCertHighAssuranceEVRootCA.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.2.1
                  CPS: https://www.digicert.com/CPS
                Policy: 2.23.140.1.1

    Signature Algorithm: sha256WithRSAEncryption
         70:4f:22:ed:82:22:d2:c8:75:30:9b:72:b4:4d:72:ef:dc:30:
         64:0b:d1:a4:a8:9a:c1:69:0e:e7:fb:ba:b0:71:76:2d:10:37:
         0c:1a:61:10:38:5f:88:0b:38:ff:f7:f9:6d:c3:11:1a:21:ea:
         c1:9b:8b:3c:7e:e0:27:5f:c5:bd:a3:b6:f4:bc:ed:e3:4e:1b:
         ca:5a:3f:66:c5:7f:37:a4:e9:6f:62:51:c3:50:2d:4d:a6:d0:
         64:30:d1:78:4c:a1:b2:82:cc:b4:53:41:d1:f5:ba:95:b9:88:
         b9:5a:65:53:c6:aa:a4:30:59:77:ab:b8:70:49:05:98:c6:a6:
         4f:fb:5b:c4:bb:b7:73:fd:08:d3:14:33:e9:71:c0:8c:4e:85:
         4b:57:e5:94:0e:11:87:0b:42:07:bb:64:a1:b4:8e:4b:f4:eb:
         e5:cc:86:88:36:06:51:db:83:59:ed:69:24:ce:1a:47:f8:89:
         8a:0b:1b:bc:a4:f6:2f:c9:c6:5f:48:d7:8f:3b:dd:99:97:c1:
         93:84:a2:d6:6d:d0:56:eb:c7:9f:d7:40:ea:36:d0:7d:1d:1d:
         88:68:03:ed:cc:75:a7:73:04:1e:5d:fb:9a:1c:7b:97:0c:4b:
         3f:9a:41:7f:92:fc:9e:a2:17:85:32:e2:1b:d6:2d:61:ae:4c:
         c9:bd:b1:4b

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgIQBahUCVpSbEJ4x1tHRh4J0zANBgkqhkiG9w0BAQsFADBs
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5j
ZSBFViBSb290IENBMB4XDTE5MDYyMDEyMjE1OVoXDTI5MDYyMDEyMjE1OVowbzEL
MAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3
LmRpZ2ljZXJ0LmNvbTEuMCwGA1UEAxMlU2VjdXJlIFNpdGUgRXh0ZW5kZWQgVmFs
aWRhdGlvbiBDQSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALfi
6MdegU/YaWxmXJ9mYcvY5hbiqRZ221Nq+paGg9wQLnVzw7tpbisbCKQ5s4tnhdh2
8JlqrgqB9gneUqmITQI2mzeFyH02cjmKDjBxj8Misg0ld0GVV8cNVGPKaJ2/APCm
HqSfbTwybDWmf3Zq65ZYGTJVHbBeu7X8foqA19D2Jm9CO0CstO8fz92pmebbtRxH
8L/5wLvHIra+0xXJ+znyT2Tom2hNsYv4PkZYTYAbwx1hOZnaFXPP48X02zE3oVJA
H+Q458SPmzH62ybCoh86knzcTJlI/62ZRWfkFe4W+Vp5BunaqZC65RuRDgTViScH
IDqFwVgscAiPF/DA2AUCAwEAAaOCAVMwggFPMB0GA1UdDgQWBBSpO7p6WJVINf7W
B50riyX+auHboDAfBgNVHSMEGDAWgBSxPsNpA/i/RwHUmCYaCALvY2QrwzAOBgNV
HQ8BAf8EBAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA8GA1Ud
EwEB/wQFMAMBAf8wMQYIKwYBBQUHAQEEJTAjMCEGCCsGAQUFBzABhhVodHRwOi8v
b2NzcC5kY29jc3AuY24wTQYDVR0fBEYwRDBCoECgPoY8aHR0cDovL2NybC5kaWdp
Y2VydC1jbi5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlRVZSb290Q0EuY3JsMEsG
A1UdIAREMEIwNwYJYIZIAYb9bAIBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3
LmRpZ2ljZXJ0LmNvbS9DUFMwBwYFZ4EMAQEwDQYJKoZIhvcNAQELBQADggEBAHBP
Iu2CItLIdTCbcrRNcu/cMGQL0aSomsFpDuf7urBxdi0QNwwaYRA4X4gLOP/3+W3D
ERoh6sGbizx+4Cdfxb2jtvS87eNOG8paP2bFfzek6W9iUcNQLU2m0GQw0XhMobKC
zLRTQdH1upW5iLlaZVPGqqQwWXeruHBJBZjGpk/7W8S7t3P9CNMUM+lxwIxOhUtX
5ZQOEYcLQge7ZKG0jkv06+XMhog2BlHbg1ntaSTOGkf4iYoLG7yk9i/Jxl9I1487
3ZmXwZOEotZt0Fbrx5/XQOo20H0dHYhoA+3MdadzBB5d+5oce5cMSz+aQX+S/J6i
F4Uy4hvWLWGuTMm9sUs=
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06