AppleISTCA8G1.cer: C=US,O=Apple Inc.,OU=Certification Authority,CN=Apple IST CA 8 - G1 (Intermediate Certificate, Expiring 2031-06-08) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: https://www.apple.com/certificateauthority/AppleISTCA8G1.cer (in PEM format )
Serial Number : 25682048445732283764158063472994674655
SHA-1 Fingerprint : f2f440ab16d7cae39e73270e97266dff15606ec0
SHA-1 Fingerprint : f2:f4:40:ab:16:d7:ca:e3:9e:73:27:0e:97:26:6d:ff:15:60:6e:c0
SHA-256 Fingerprint : a4fe7c7f15155f3f0aef7aaa83cf6e06deb97ca3f909df920ac1490882d488ed
SHA-256 Fingerprint : a4:fe:7c:7f:15:15:5f:3f:0a:ef:7a:aa:83:cf:6e:06:de:b9:7c:a3:f9:09:df:92:0a:c1:49:08:82:d4:88:ed
Signature Hash Algorithm : sha384
Subject : C=US,O=Apple Inc.,OU=Certification Authority,CN=Apple IST CA 8 - G1
- Common Name: Apple IST CA 8 - G1
- Organization Unit: Certification Authority
- Organization: Apple Inc.
- Country Name: US (United States of America)
Not Valid Before: 2016-06-09 00:00:00
Not Valid After: 2031-06-08 23:59:59
Issuer (Parent Certificate):
- Issuer Name: CN=GeoTrust Primary Certification Authority - G2,OU=(c) 2007 GeoTrust Inc. - For authorized use only,O=GeoTrust Inc.,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: https://images.apple.com/certificateauthority/pdf/Apple_Certificate_Policy_v3.1.pdf
- Certificate Practice Statement (CPS) URL: https://www.apple.com/certificateauthority/Apple_Public_CPS
- Auditor: Ernst & Young, LLP
- Standard Audit URL: https://www.cpacanada.ca/generichandlers/CPACHandler.ashx?attachmentid=15b92005-0ad5-4bc7-a9f1-3f2b27097bf0
- Standard Audit Period Start Date: 2021.04.16
- Standard Audit Period End Date: 2022.04.15
- Standard Audit Statement Date: 2022.07.09
- Standard Audit Type: WebTrust
- Full CRL Issued By This CA: Unknown
- Check its issuer’s audit information: CN=GeoTrust Primary Certification Authority - G2,OU=(c) 2007 GeoTrust Inc. - For authorized use only,O=GeoTrust Inc.,C=US .

Download certificate through curl:

curl -sSL "https://www.apple.com/certificateauthority/AppleISTCA8G1.cer" --output cert.crt

Download certificate through wget:

wget -q "https://www.apple.com/certificateauthority/AppleISTCA8G1.cer" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:52:2e:bf:c1:dd:5c:e1:1e:f2:76:40:75:1f:e7:df
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=GeoTrust Inc., OU=(c) 2007 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G2
        Validity
            Not Before: Jun  9 00:00:00 2016 GMT
            Not After : Jun  8 23:59:59 2031 GMT
        Subject: CN=Apple IST CA 8 - G1, OU=Certification Authority, O=Apple Inc., C=US
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:2d:54:8e:68:b0:10:13:ef:f4:2d:db:d8:09:b2:
                    43:e8:9d:65:99:6e:34:b8:d4:97:c9:8e:c9:d6:a8:
                    22:37:32:c8:71:60:ee:b0:f1:f2:c5:64:f6:ba:47:
                    5f:fc:e6:07:78:32:2d:f6:ca:80:20:c9:fd:70:f8:
                    72:93:21:88:45
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://g.symcb.com/GeoTrustPCA-G2.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://g.symcd.com

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: https://www.geotrust.com/resources/cps

            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Key Identifier: 
                C3:C4:A4:58:05:63:D7:83:06:BA:96:8D:DC:B2:8F:32:F6:BB:B7:41
            X509v3 Authority Key Identifier: 
                keyid:15:5F:35:57:51:55:FB:25:B2:AD:03:69:FC:01:A3:FA:BE:11:55:D5

    Signature Algorithm: ecdsa-with-SHA384
         30:64:02:30:47:da:33:0d:c9:b8:c2:93:74:ec:3a:27:57:c4:
         95:fd:60:33:cc:77:94:b7:28:30:af:f2:fc:93:74:91:a1:b6:
         89:72:ed:f4:09:44:db:f9:ae:75:73:fb:a6:06:7e:c3:02:30:
         4a:7a:c3:28:5e:2f:b3:4a:9a:a6:af:b1:db:a2:c7:64:7e:8f:
         50:77:c1:18:de:97:32:58:81:7c:e0:33:79:f0:85:02:8a:94:
         95:b1:a4:5e:c8:18:7b:af:6b:5b:5a:c6