D-TRUST_CA_3-21-3_2022.crt: 2.5.4.97=NTRDE-HRB74346,CN=D-TRUST CA 3-21-3 2022,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2036-02-17) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_CA_3-21-3_2022.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_CA_3-21-3_2022.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0b:4a:72:ba:98:33:49:96:bd:e6:8c:98:95:9f:1b
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 3 2021
        Validity
            Not Before: Dec 20 09:53:34 2022 GMT
            Not After : Feb 17 10:14:59 2036 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST CA 3-21-3 2022/2.5.4.97=NTRDE-HRB74346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:be:d7:e2:b7:59:d9:25:91:a1:07:c7:cc:38:8f:
                    7f:7c:c5:63:7b:38:18:b6:f1:eb:39:b4:89:1e:63:
                    9c:8e:4c:ee:48:50:68:f2:39:06:b1:70:59:33:33:
                    c5:ec:55:6f:01:7c:4d:21:05:ec:e6:0b:c0:93:5d:
                    78:32:f2:3a:6f:31:76:02:39:77:02:4f:95:29:b7:
                    e7:6a:e5:d3:aa:95:db:a9:9e:01:1e:12:0c:c7:31:
                    8d:e4:a0:d2:a5:4f:5d:77:8e:e7:21:38:55:c7:b8:
                    88:6c:ae:f5:f9:2e:eb:c5:15:7a:11:dd:e1:f1:7b:
                    7d:3e:e6:a0:f7:0b:fa:7e:5e:02:f2:19:63:d2:f3:
                    e5:7c:a8:9a:88:c6:65:0b:8b:b5:4a:22:ff:1c:4b:
                    68:b6:d5:8d:4d:87:c0:57:38:2d:37:24:79:4c:64:
                    80:84:2d:20:d2:45:32:ad:3e:9f:48:11:83:c2:1b:
                    8c:24:3b:c8:7a:3d:2f:53:fd:f0:1a:0f:fd:12:31:
                    53:6a:6c:aa:b6:89:ac:14:3a:8d:96:e5:d6:b0:6b:
                    4d:e9:bf:6d:5b:79:a7:a8:88:45:05:c9:29:6a:17:
                    17:d8:b5:c7:c7:75:33:b2:fd:ec:c4:04:79:92:83:
                    7e:51:89:70:27:a5:08:aa:79:24:55:bc:2a:c2:95:
                    bb:92:29:30:6f:3b:44:66:fe:d2:5d:85:11:05:5a:
                    ee:62:05:21:07:34:5e:b8:d3:55:d2:d7:62:97:84:
                    86:2b:ca:fd:01:f1:c8:46:81:db:b2:32:d8:34:e2:
                    b1:42:03:11:8d:af:f5:7b:d8:90:74:6a:a6:7c:38:
                    07:c8:b2:89:89:46:d6:2a:d2:b8:b6:fc:e6:5f:cc:
                    70:82:4c:61:89:45:66:bb:ba:95:01:ca:bb:1b:4d:
                    99:a3:b7:55:a1:6d:37:12:22:0e:96:e4:f8:d4:c0:
                    2c:b9:16:30:9f:11:63:55:4b:46:e1:85:38:71:10:
                    2d:a7:e9:06:b2:d5:2e:03:ac:e5:bc:4e:bb:b7:42:
                    f6:68:52:79:5b:13:a2:f5:9c:20:77:63:86:50:d2:
                    56:77:09:b0:85:da:67:ea:cc:ae:91:5a:46:d6:0f:
                    d2:78:66:e6:ce:c3:0b:d9:ff:d1:12:b6:80:c1:73:
                    80:65:16:30:7f:99:2b:ee:da:d4:59:d8:53:46:27:
                    4c:d4:b2:d6:08:02:26:28:7a:0f:57:f4:ed:fe:59:
                    38:04:dd:51:15:75:a6:96:db:0d:72:5d:a8:52:b8:
                    ce:d2:12:a7:c4:3d:03:89:98:c7:35:61:27:25:7b:
                    75:70:72:44:1d:09:f5:2f:21:e7:a0:73:70:ca:06:
                    a1:17:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:B1:A7:5F:73:08:2D:F8:0B:6E:2D:51:34:79:0A:C6:1F:E1:90:46:50

            Authority Information Access: 
                OCSP - URI:http://root-ca-3-2021.ocsp.d-trust.net
                CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_3_2021.crt

            X509v3 Certificate Policies: 
                Policy: 0.4.0.194112.1.2
                Policy: 1.3.6.1.4.1.4788.2.150.1
                  CPS: https://www.d-trust.net/internet/files/D-TRUST_TSPS.pdf

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_ca_3_2021.crl

            X509v3 Subject Key Identifier: 
                1C:5B:B6:A6:73:C4:0C:FA:5E:62:77:2D:C0:33:13:11:CF:25:84:A8
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)

         42:88:ca:ed:f8:61:43:ce:ff:7c:44:d8:ce:e2:0d:b4:96:df:
         ab:2e:8f:41:c0:a1:34:af:d3:c4:dc:46:b7:a9:a5:e4:e1:fd:
         d2:04:2f:a1:13:7e:bb:b5:1e:e8:7c:29:29:94:42:3e:c1:25:
         b3:6f:24:88:a2:ff:12:cb:b4:99:91:ec:f2:8d:b0:43:a5:7d:
         50:ac:bd:e1:b7:b3:14:1d:0f:a6:cb:59:58:ac:be:ca:22:b8:
         a3:3f:f7:33:2d:f3:d0:dd:c8:d1:a2:8a:c5:8d:55:7d:a9:04:
         1a:d4:09:67:62:ad:69:b0:30:04:6d:42:18:c1:f2:6b:3f:fb:
         15:8e:24:7f:04:1c:20:85:dd:3a:b6:a9:22:bb:bd:69:47:ce:
         a9:17:98:56:fd:96:b0:8f:5d:55:b6:1c:72:4d:93:aa:83:db:
         b3:e6:60:aa:3d:eb:cd:b9:bc:26:ef:5d:c1:c1:b0:37:f6:d2:
         f8:0a:8c:48:38:2f:33:47:14:f7:27:62:02:df:0b:b7:af:57:
         ad:a5:de:80:a0:ff:09:64:33:18:5a:3e:59:64:36:34:13:20:
         4c:1e:13:c5:76:33:05:a4:53:e2:18:c5:46:2c:5e:c3:42:d3:
         e0:e4:77:e7:69:eb:cc:c1:ed:bd:40:18:e7:78:f9:86:8d:2d:
         32:2e:49:df:08:fc:1e:88:85:69:eb:07:9d:43:d3:50:86:0c:
         48:c5:16:03:b2:4f:5d:e4:a8:1a:2a:4e:f9:dc:bf:60:29:2e:
         48:56:d5:66:74:f8:59:44:3a:7c:ec:80:b7:9f:36:69:be:7d:
         0a:bf:eb:32:04:82:4f:38:0c:8c:a8:a7:fb:d1:72:83:cc:7a:
         79:4d:6e:64:8b:0b:10:97:8f:58:cf:5f:e8:d3:f5:55:d9:9c:
         05:5f:a9:c3:81:a3:d1:52:32:04:bc:8d:76:0d:ce:6a:f4:25:
         3a:de:68:73:a5:aa:64:47:8b:15:08:3e:11:53:76:35:5c:68:
         01:88:07:dd:82:c6:43:61:0d:a5:89:44:c7:97:de:8a:3f:cf:
         15:15:c4:3d:0e:83:ba:26:a0:09:e8:13:4a:87:d0:39:7e:81:
         81:0d:c1:3d:df:60:4e:2f:3c:02:af:2b:64:9e:a5:29:26:38:
         6e:ca:f6:a8:3e:3c:2d:28:76:36:78:20:51:f4:a4:45:fb:e0:
         e7:f5:9a:60:d7:42:71:10:58:8a:b0:8d:18:35:a3:12:1d:92:
         9c:40:c2:86:cc:82:75:fb:4c:a6:c1:bc:de:90:15:9a:30:f3:
         71:e5:e3:62:dc:90:e1:96:4b:10:49:ff:74:c9:c3:db:cd:0d:
         9f:e8:6f:45:10:fc:e3:84

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06