G2-RootCA3.orig.cer: CN=Amazon Root CA 3,O=Amazon,C=US (Intermediate Certificate, Expiring 2037-12-31) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: https://www.amazontrust.com/repository/G2-RootCA3.orig.cer (in DER format )
Serial Number : 144546606872054372011694859608770761202829826
SHA-1 Fingerprint : ed1ee65e042052a8313779cd45cb49b6bb00b8e1
SHA-1 Fingerprint : ed:1e:e6:5e:04:20:52:a8:31:37:79:cd:45:cb:49:b6:bb:00:b8:e1
SHA-256 Fingerprint : b2d98c992cf7ed639190854b7d66a26dbc22b0b8d8a87dfc7d19e25f5d6c9953
SHA-256 Fingerprint : b2:d9:8c:99:2c:f7:ed:63:91:90:85:4b:7d:66:a2:6d:bc:22:b0:b8:d8:a8:7d:fc:7d:19:e2:5f:5d:6c:99:53
Signature Hash Algorithm : sha256
Subject : CN=Amazon Root CA 3,O=Amazon,C=US
- Country Name: US (United States of America)
- Organization: Amazon
- Common Name: Amazon Root CA 3
Not Valid Before: 2015-10-21 22:21:08
Not Valid After: 2037-12-31 00:00:00
Issuer (Parent Certificate):
- Issuer Name: CN=Starfield Services Root Certificate Authority - G2,O=Starfield Technologies, Inc.,L=Scottsdale,ST=Arizona,C=US
- Issuer Certificate URL: NA
Audit Record:
- No public audit information was found by E2Encrypted.com. We update this information regularly, check back later.
- Check its issuer’s audit information: CN=Starfield Services Root Certificate Authority - G2,O=Starfield Technologies, Inc.,L=Scottsdale,ST=Arizona,C=US .

Download certificate through curl:

curl -sSL "https://www.amazontrust.com/repository/G2-RootCA3.orig.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.amazontrust.com/repository/G2-RootCA3.orig.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7b:50:4c:ad:72:28:9a:46:e9:ca:14:0f:a2:14:e8:6f:8a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2
        Validity
            Not Before: Oct 21 22:21:08 2015 GMT
            Not After : Dec 31 00:00:00 2037 GMT
        Subject: C=US, O=Amazon, CN=Amazon Root CA 3
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:29:97:a7:c6:41:7f:c0:0d:9b:e8:01:1b:56:c6:
                    f2:52:a5:ba:2d:b2:12:e8:d2:2e:d7:fa:c9:c5:d8:
                    aa:6d:1f:73:81:3b:3b:98:6b:39:7c:33:a5:c5:4e:
                    86:8e:80:17:68:62:45:57:7d:44:58:1d:b3:37:e5:
                    67:08:eb:66:de
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                AB:B6:DB:D7:06:9E:37:AC:30:86:07:91:70:C7:9C:C4:19:B1:78:C0
            X509v3 Authority Key Identifier: 
                keyid:9C:5F:00:DF:AA:01:D7:30:2B:38:88:A2:B8:6D:4A:9C:F2:11:91:83

            Authority Information Access: 
                OCSP - URI:http://ocsp.rootg2.amazontrust.com
                CA Issuers - URI:http://crl.rootg2.amazontrust.com/rootg2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.rootg2.amazontrust.com/rootg2.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

    Signature Algorithm: sha256WithRSAEncryption
         85:f2:92:56:67:b8:4a:cb:5e:ba:e6:2e:40:ef:d5:a8:51:47:
         c1:80:32:ba:23:39:a9:62:7b:e7:93:8f:c9:90:2a:85:5d:a2:
         04:f5:4c:98:c7:99:67:97:6e:a8:ed:78:a5:a3:9a:1d:48:ac:
         4b:28:cc:9f:ab:5d:15:83:14:4e:4e:7f:03:2a:f2:04:0d:b8:
         eb:bb:a7:29:5a:42:c4:14:f8:85:25:c8:9e:26:bd:09:8e:56:
         d9:30:ec:1f:90:b2:de:4c:0a:39:ba:50:e1:61:2c:84:d9:4d:
         5c:48:7a:ec:47:6f:9c:f2:26:15:25:08:61:89:fa:2c:0f:7d:
         4d:e8:ec:ba:3c:d0:84:de:c4:64:b5:c0:f8:ba:5f:97:da:21:
         a7:08:65:ce:5d:05:14:9c:da:83:d1:04:4e:ff:a3:4a:eb:ed:
         4e:1c:21:b6:f1:c0:0a:32:19:7d:55:d4:57:16:47:9e:63:ad:
         25:ef:88:ba:3b:2b:d3:d2:af:f3:23:5f:a0:6a:46:18:19:02:
         eb:58:61:34:70:44:4f:c6:ca:33:06:99:c7:17:93:70:ed:91:
         b3:27:e0:03:81:54:77:fc:ca:d4:78:94:a3:49:63:7f:36:57:
         56:1f:71:17:90:94:3a:b9:67:bd:09:b3:b6:e2:d8:1f:d1:ba:
         09:30:84:0a

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates