cacert.crt: CN=TU Ilmenau CA G2,O=Technische Universitaet Ilmenau,C=DE (Intermediate Certificate, Expiring 2031-02-22) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://cdp1.pca.dfn.de/tu-ilmenau-g2-ca/pub/cacert/cacert.crt" --output cert.crt

Download certificate through wget:

wget -q "http://cdp1.pca.dfn.de/tu-ilmenau-g2-ca/pub/cacert/cacert.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9d:cd:8a:84:f6:51:7b:47:58:cc:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=DE, O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V., OU=DFN-PKI, CN=DFN-Verein Certification Authority 2
        Validity
            Not Before: Jul  7 12:50:02 2016 GMT
            Not After : Feb 22 23:59:59 2031 GMT
        Subject: C=DE, O=Technische Universitaet Ilmenau, CN=TU Ilmenau CA G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:14:30:00:01:9a:ac:87:28:73:5e:68:ab:31:
                    d4:f8:e1:85:8f:75:e4:6e:ef:90:91:47:84:de:5a:
                    3a:5d:36:7d:80:1d:0a:51:e0:63:90:b9:4d:6e:b7:
                    1c:6e:e7:f2:c4:4f:aa:09:e1:fa:f9:69:20:94:6f:
                    98:13:76:0b:9c:f6:30:dc:ee:aa:a6:68:56:8a:ff:
                    1e:d9:d0:44:e6:2e:c5:01:4b:5b:95:04:e8:f8:a3:
                    55:14:27:c4:17:7a:54:2c:9b:d0:c9:26:68:f8:17:
                    77:c3:d8:1d:4f:90:a7:fa:9e:22:80:1a:32:46:c3:
                    96:29:4b:6a:19:08:d9:98:c2:7c:84:81:b0:be:f7:
                    31:81:b0:16:1d:61:07:0f:01:f8:65:14:fc:70:0e:
                    6c:1d:06:39:ef:14:f0:ea:a3:28:a8:4e:10:58:ca:
                    c3:ab:b7:78:ca:0b:5c:2e:19:5d:bd:27:d0:33:ca:
                    72:48:a3:f3:f9:af:99:54:ce:ce:93:29:26:b6:f0:
                    32:bd:0c:07:e7:14:3f:36:f3:80:79:ba:29:97:46:
                    4c:0f:e6:a7:39:cf:5a:cf:f8:e9:94:42:c1:d0:82:
                    f7:3c:64:87:7c:8b:09:c2:e4:78:1c:02:a0:be:8d:
                    dc:b9:f0:7d:c9:c0:7a:a0:4e:8a:df:02:76:72:3f:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:1
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22177.300.30
                Policy: 1.3.6.1.4.1.22177.300.1.1.4

            X509v3 Subject Key Identifier: 
                64:D1:62:5B:6A:DE:E3:5D:19:93:7B:A2:6B:A7:21:34:E9:06:DF:21
            X509v3 Authority Key Identifier: 
                keyid:93:E3:D8:32:26:DA:D5:F1:4A:A5:91:4A:E0:EA:4B:E2:A2:0C:CF:E1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://cdp1.pca.dfn.de/global-root-g2-ca/pub/crl/cacrl.crl

                Full Name:
                  URI:http://cdp2.pca.dfn.de/global-root-g2-ca/pub/crl/cacrl.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.pca.dfn.de/OCSP-Server/OCSP
                CA Issuers - URI:http://cdp1.pca.dfn.de/global-root-g2-ca/pub/cacert/cacert.crt
                CA Issuers - URI:http://cdp2.pca.dfn.de/global-root-g2-ca/pub/cacert/cacert.crt

    Signature Algorithm: sha256WithRSAEncryption
         99:5e:62:10:56:93:e1:a1:8d:0e:6c:1b:00:73:07:6c:4f:a8:
         0a:cd:0d:63:09:fd:1b:da:58:8f:75:4c:e3:72:7f:ca:2b:bd:
         91:13:63:42:52:42:00:0c:48:c1:5e:5f:0a:0b:6c:a2:36:f5:
         8d:44:dd:47:e1:96:50:45:33:94:3d:71:d2:0e:b8:7d:c5:2a:
         ad:5b:36:b1:c4:91:7a:c7:23:11:f8:21:36:de:86:ed:fc:50:
         d2:d8:9d:53:29:b0:51:16:e9:65:5c:49:fc:3f:32:f5:49:ab:
         6d:a2:99:d5:c9:0c:b1:1d:37:3e:bc:01:4b:22:5d:18:01:28:
         8c:16:1b:aa:07:79:ed:65:ee:20:04:86:c1:a4:0a:4d:06:af:
         cc:0c:93:d3:36:53:00:1d:40:8b:e4:5f:2e:90:b9:7c:19:9d:
         48:41:3c:95:1d:9f:8f:e2:a9:8d:88:4a:13:12:5c:7f:ae:50:
         c0:ec:24:10:3f:12:9c:c9:6f:d9:88:07:59:65:9c:63:b9:27:
         86:4c:9f:e0:54:fd:1a:01:e1:fb:4d:68:8a:c5:77:78:62:74:
         f5:6a:6d:66:3c:aa:ca:8a:59:76:b4:20:3f:4b:58:8a:7f:9d:
         b8:7e:56:2a:ee:94:85:fa:e2:0c:45:13:7b:d9:bc:ba:65:b1:
         7f:69:5c:ae

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIMG53NioT2UXtHWMz0MA0GCSqGSIb3DQEBCwUAMIGVMQsw
CQYDVQQGEwJERTFFMEMGA1UEChM8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVz
IERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLEwdERk4t
UEtJMS0wKwYDVQQDEyRERk4tVmVyZWluIENlcnRpZmljYXRpb24gQXV0aG9yaXR5
IDIwHhcNMTYwNzA3MTI1MDAyWhcNMzEwMjIyMjM1OTU5WjBSMQswCQYDVQQGEwJE
RTEoMCYGA1UECgwfVGVjaG5pc2NoZSBVbml2ZXJzaXRhZXQgSWxtZW5hdTEZMBcG
A1UEAwwQVFUgSWxtZW5hdSBDQSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAOcUMAABmqyHKHNeaKsx1PjhhY915G7vkJFHhN5aOl02fYAdClHgY5C5
TW63HG7n8sRPqgnh+vlpIJRvmBN2C5z2MNzuqqZoVor/HtnQROYuxQFLW5UE6Pij
VRQnxBd6VCyb0MkmaPgXd8PYHU+Qp/qeIoAaMkbDlilLahkI2ZjCfISBsL73MYGw
Fh1hBw8B+GUU/HAObB0GOe8U8OqjKKhOEFjKw6u3eMoLXC4ZXb0n0DPKckij8/mv
mVTOzpMpJrbwMr0MB+cUPzbzgHm6KZdGTA/mpznPWs/46ZRCwdCC9zxkh3yLCcLk
eBwCoL6N3LnwfcnAeqBOit8CdnI/ysECAwEAAaOCAgUwggIBMBIGA1UdEwEB/wQI
MAYBAf8CAQEwDgYDVR0PAQH/BAQDAgEGMCkGA1UdIAQiMCAwDQYLKwYBBAGBrSGC
LB4wDwYNKwYBBAGBrSGCLAEBBDAdBgNVHQ4EFgQUZNFiW2re410Zk3uia6chNOkG
3yEwHwYDVR0jBBgwFoAUk+PYMiba1fFKpZFK4OpL4qIMz+EwgY8GA1UdHwSBhzCB
hDBAoD6gPIY6aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1j
YS9wdWIvY3JsL2NhY3JsLmNybDBAoD6gPIY6aHR0cDovL2NkcDIucGNhLmRmbi5k
ZS9nbG9iYWwtcm9vdC1nMi1jYS9wdWIvY3JsL2NhY3JsLmNybDCB3QYIKwYBBQUH
AQEEgdAwgc0wMwYIKwYBBQUHMAGGJ2h0dHA6Ly9vY3NwLnBjYS5kZm4uZGUvT0NT
UC1TZXJ2ZXIvT0NTUDBKBggrBgEFBQcwAoY+aHR0cDovL2NkcDEucGNhLmRmbi5k
ZS9nbG9iYWwtcm9vdC1nMi1jYS9wdWIvY2FjZXJ0L2NhY2VydC5jcnQwSgYIKwYB
BQUHMAKGPmh0dHA6Ly9jZHAyLnBjYS5kZm4uZGUvZ2xvYmFsLXJvb3QtZzItY2Ev
cHViL2NhY2VydC9jYWNlcnQuY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQCZXmIQVpPh
oY0ObBsAcwdsT6gKzQ1jCf0b2liPdUzjcn/KK72RE2NCUkIADEjBXl8KC2yiNvWN
RN1H4ZZQRTOUPXHSDrh9xSqtWzaxxJF6xyMR+CE23obt/FDS2J1TKbBRFullXEn8
PzL1SattopnVyQyxHTc+vAFLIl0YASiMFhuqB3ntZe4gBIbBpApNBq/MDJPTNlMA
HUCL5F8ukLl8GZ1IQTyVHZ+P4qmNiEoTElx/rlDA7CQQPxKcyW/ZiAdZZZxjuSeG
TJ/gVP0aAeH7TWiKxXd4YnT1am1mPKrKill2tCA/S1iKf524flYq7pSF+uIMRRN7
2by6ZbF/aVyu
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06