D-TRUST_CA_1-21-1_2021.crt: 2.5.4.97=NTRDE-HRB74346,CN=D-TRUST CA 1-21-1 2021,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2036-02-17) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_CA_1-21-1_2021.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_CA_1-21-1_2021.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3a:00:7a:eb:5d:c3:81:8b:63:ce:f9:4e:2b:e4:ab
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 1 2021
        Validity
            Not Before: Jun  1 08:05:44 2021 GMT
            Not After : Feb 17 09:39:59 2036 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST CA 1-21-1 2021/2.5.4.97=NTRDE-HRB74346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:ce:db:ba:f3:63:ab:95:3a:37:e5:df:49:b1:b8:
                    de:03:5b:de:26:59:76:78:e2:29:45:be:7d:d9:bf:
                    a2:3a:09:1d:1a:3a:4e:91:b3:5b:b6:65:44:aa:fc:
                    5d:68:90:40:da:ca:ca:8d:ea:0e:af:a4:76:a5:3b:
                    e7:9f:a8:1d:f1:81:61:db:c3:1a:e7:1f:24:be:1f:
                    f1:b8:c0:a2:ad:53:1b:9a:ff:c7:6e:5b:51:a0:3a:
                    1e:d1:00:f2:e2:fa:80:a2:73:09:66:70:5a:75:59:
                    cf:60:9a:8e:19:64:d5:9d:1d:09:29:bc:09:af:cc:
                    9b:e9:e6:44:2f:b3:99:2a:65:2c:22:d2:87:76:74:
                    fa:dc:6f:c5:8d:c6:8c:f8:7c:73:81:7a:46:83:35:
                    7a:cd:6f:d1:ba:1b:06:3e:1f:f7:e7:8d:ce:ac:53:
                    ce:7b:10:38:c4:04:f7:69:f0:12:4d:e0:3e:b3:e5:
                    1f:44:1b:b2:27:7d:6d:31:b9:14:5a:12:d2:9d:69:
                    7e:e9:a9:90:04:83:a3:ca:a4:b5:aa:47:24:9f:e8:
                    83:09:fe:52:96:da:f5:6a:9a:7f:ec:58:50:76:d7:
                    f6:c2:f8:e6:7a:6f:21:01:45:86:21:b3:79:c4:3e:
                    18:11:a0:18:20:32:40:fe:b4:36:19:f9:64:fc:fe:
                    f9:52:0f:bb:55:ed:c5:7d:22:3d:d2:52:19:05:f9:
                    5a:55:14:cd:64:5e:48:fe:c4:f0:20:17:b7:61:d9:
                    42:3c:be:1f:c2:31:30:4b:96:a0:dd:fe:ec:78:c0:
                    a3:46:9b:f6:b7:11:42:ea:9f:5d:78:ad:56:6d:96:
                    0f:0b:07:3f:d0:ce:47:56:aa:b9:2a:2c:0a:b8:df:
                    c6:2b:01:00:df:97:00:e9:e9:9f:2b:08:25:9a:aa:
                    2b:83:9b:be:23:7e:0e:ae:29:33:da:b8:9a:3b:43:
                    62:0b:79:f4:cd:d8:8d:f9:a0:21:7a:3c:c5:1d:0a:
                    bd:f5:be:79:22:99:b7:b1:a6:72:97:1a:2d:e4:d8:
                    aa:42:34:a4:63:09:95:2a:1e:33:c9:ac:4e:60:cb:
                    da:63:d5:5f:7d:06:5b:77:fe:d2:6b:18:10:d3:7b:
                    1d:3e:88:7a:ef:89:89:5d:cc:d8:3e:4d:2b:bb:db:
                    69:6c:cc:f3:e3:35:f6:f6:ce:14:80:ac:af:f4:f8:
                    cd:7c:26:43:17:b9:7e:bc:04:8a:04:61:f7:7b:3e:
                    34:e7:f9:9c:ae:67:5e:0a:7f:f8:eb:14:db:24:d7:
                    4e:f0:a4:a5:6e:86:d4:8a:17:44:40:e1:23:f1:90:
                    2d:a3:28:bd:19:ce:03:92:d3:46:3e:44:5d:e9:2c:
                    60:92:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:54:AE:30:E3:98:1C:8B:13:CC:6F:1E:D8:F0:44:A6:6F:E4:05:B7:F3

            Authority Information Access: 
                OCSP - URI:http://dtr-root-ca-1-2021.ocsp.d-trust.net
                CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_1_2021.crt

            X509v3 Certificate Policies: 
                Policy: 0.4.0.194112.1.2
                Policy: 1.3.6.1.4.1.4788.2.100.1
                  CPS: http://www.d-trust.net/internet/files/D-TRUST_TSPS.pdf

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_ca_1_2021.crl

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20CA%201%202021,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

            X509v3 Subject Key Identifier: 
                88:9A:0E:ED:B4:A6:A6:21:3D:F9:ED:69:99:CF:C0:6A:A1:A4:63:78
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)

         3a:b8:6e:8d:16:21:cb:3c:c0:5b:f6:e5:66:d2:2f:65:06:f2:
         68:f5:03:98:ee:5a:f1:c7:53:21:14:54:46:d7:ac:5c:9f:0e:
         66:bb:75:2b:61:22:a0:d6:17:b6:a6:db:35:b6:eb:b7:73:91:
         9a:29:2e:75:1e:8c:ed:d1:bc:41:87:21:e5:ee:65:4f:2c:1c:
         9b:65:01:a1:7a:ae:34:8c:0e:48:ea:87:bc:3e:84:9d:c8:de:
         b2:8e:b8:83:83:12:dd:8f:e4:ef:43:7b:27:d5:62:1d:6d:bb:
         24:47:5f:30:ad:5e:cc:b0:b9:bf:af:fb:a0:89:57:d5:cf:2b:
         0f:54:c5:72:36:a7:3a:3b:f0:6c:78:80:39:53:42:93:0c:ea:
         b6:87:08:13:51:b5:3d:75:9b:55:36:6d:06:7e:4c:1a:a3:3c:
         2b:c2:7f:0e:94:87:e2:20:db:8e:80:29:ac:8a:4b:b8:ac:0a:
         96:17:23:8e:13:69:a5:80:c1:7f:b4:0f:16:8c:5e:39:81:ee:
         b2:88:34:96:a5:52:5f:1a:ed:6b:9a:3a:1c:1e:52:31:eb:f9:
         62:b5:1d:46:91:39:da:15:92:46:60:0e:c6:a1:5b:c9:b9:81:
         85:6f:7c:54:3d:09:97:bc:bd:eb:c4:02:75:ca:03:02:50:20:
         70:b6:57:c5:15:bd:9e:e0:c9:d8:c5:66:42:83:c9:f8:a3:d2:
         7f:72:bb:4a:7c:c6:76:70:b7:ec:3c:9f:9a:24:37:65:62:26:
         0d:15:33:37:0e:40:e2:28:f7:2c:5f:27:46:38:e9:26:06:5e:
         2e:3a:e4:5a:05:45:e5:34:71:e4:27:7e:29:d8:52:36:95:ae:
         bb:91:1e:22:0f:01:b9:43:af:35:86:be:bb:ca:40:11:7f:f6:
         f7:f7:c0:e8:29:ad:3a:a8:0f:0c:a5:ba:ec:60:26:8d:cc:ea:
         65:28:71:e2:bb:b3:b0:e0:f5:73:90:57:99:98:63:42:49:a8:
         71:97:2d:03:e1:55:e8:8a:07:0f:67:d0:13:cf:0a:c3:16:8a:
         14:9e:3e:dc:fa:8b:bd:31:95:9a:45:44:1a:ce:81:60:c0:de:
         a9:5a:cb:34:82:9c:d8:0b:f1:74:d2:04:27:c8:06:52:76:68:
         ed:ee:b1:b9:73:5a:8f:28:45:60:55:31:bb:12:de:fe:ae:39:
         5d:ab:18:3f:49:e5:71:c3:ed:f5:1d:a6:a8:db:b2:4c:bd:c6:
         67:36:32:a1:34:91:70:12:99:a5:49:bf:9a:86:a5:a2:c4:49:
         28:4d:f4:70:91:0a:b9:eb:2e:63:13:a8:9c:73:47:0d:a0:68:
         82:1a:a7:a8:fc:45:b0:cd

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06