R4-ServerCA4A.cer: CN=Amazon,OU=Server CA 4A,O=Amazon,C=US (Intermediate Certificate, Expiring 2025-10-19) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: https://www.amazontrust.com/repository/R4-ServerCA4A.cer (in DER format )
Serial Number : 144918209407730163999413874498654166275542552
SHA-1 Fingerprint : f0e7a272b0b81ddc46e1bdb7ca01a60858d2ec85
SHA-1 Fingerprint : f0:e7:a2:72:b0:b8:1d:dc:46:e1:bd:b7:ca:01:a6:08:58:d2:ec:85
SHA-256 Fingerprint : 7bed29276acbed9f176f38bba3a67ce5815b5cbf1522c7bb59ecd86b09e16ed2
SHA-256 Fingerprint : 7b:ed:29:27:6a:cb:ed:9f:17:6f:38:bb:a3:a6:7c:e5:81:5b:5c:bf:15:22:c7:bb:59:ec:d8:6b:09:e1:6e:d2
Signature Hash Algorithm : sha384
Subject : CN=Amazon,OU=Server CA 4A,O=Amazon,C=US
- Country Name: US (United States of America)
- Organization: Amazon
- Organization Unit: Server CA 4A
- Common Name: Amazon
Not Valid Before: 2015-10-22 00:00:00
Not Valid After: 2025-10-19 00:00:00
Issuer (Parent Certificate):
- Issuer Name: CN=Amazon Root CA 4,O=Amazon,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: Unknown
- Auditor: BDO International Limited
- Standard Audit URL: https://www.cpacanada.ca/generichandlers/CPACHandler.ashx?attachmentid=2c238883-a342-4762-8e2a-f506ad5660f8
- Standard Audit Period Start Date: 2021.01.16
- Standard Audit Period End Date: 2022.01.15
- Standard Audit Statement Date: 2022.04.08
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: Unknown
- Check its issuer’s audit information: CN=Amazon Root CA 4,O=Amazon,C=US .

Download certificate through curl:

curl -sSL "https://www.amazontrust.com/repository/R4-ServerCA4A.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.amazontrust.com/repository/R4-ServerCA4A.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7f:94:57:5a:88:62:a9:07:2e:32:39:c3:7c:eb:a1:27:4e:18
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Amazon, CN=Amazon Root CA 4
        Validity
            Not Before: Oct 22 00:00:00 2015 GMT
            Not After : Oct 19 00:00:00 2025 GMT
        Subject: C=US, O=Amazon, OU=Server CA 4A, CN=Amazon
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:91:3f:49:08:5b:41:da:ef:e3:91:bc:45:61:21:
                    2e:60:22:09:07:eb:a5:f9:5b:db:c1:45:35:f5:e2:
                    81:bf:d5:e9:48:c8:8e:8b:6c:56:7e:13:92:80:b9:
                    f2:f4:5e:85:89:18:8d:56:6c:f4:66:1d:6d:b8:e8:
                    52:92:cc:5d:30:38:46:59:cb:11:11:3b:3e:ad:b9:
                    a5:6c:9d:74:47:44:4e:fa:ae:84:bf:5a:bd:3a:e2:
                    e2:69:28:7f:8b:bf:e4
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                A5:21:CD:DB:EB:53:21:99:AA:CA:D9:67:42:94:25:B2:7B:F4:C2:E3
            X509v3 Authority Key Identifier: 
                keyid:D3:EC:C7:3A:65:6E:CC:E1:DA:76:9A:56:FB:9C:F3:86:6D:57:E5:81

            Authority Information Access: 
                OCSP - URI:http://ocsp.rootca4.amazontrust.com
                CA Issuers - URI:http://crt.rootca4.amazontrust.com/rootca4.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.rootca4.amazontrust.com/rootca4.crl

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

    Signature Algorithm: ecdsa-with-SHA384
         30:66:02:31:00:e7:d4:40:38:16:a3:ba:1d:2b:4f:f3:8e:4d:
         63:c4:bf:a4:c1:9d:bf:57:11:a7:5b:ba:b0:5a:5d:bf:12:4a:
         b4:7c:8a:5f:8d:76:47:d2:f5:65:d1:03:36:f0:ac:6e:cb:02:
         31:00:de:e9:03:d4:7a:d0:ab:e5:97:1c:13:39:b0:8b:95:88:
         92:3f:66:1e:cc:3a:3b:1c:d7:9f:50:f9:d9:f7:e8:f0:6a:2d:
         1a:b4:dc:05:ea:13:f9:51:8e:7b:fc:0b:99:e3

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates