D-TRUST_BR_CA_1-20-2_2020.crt: CN=D-TRUST BR CA 1-20-2 2020,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2035-02-11) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: https://www.d-trust.net/cgi-bin/D-TRUST_BR_CA_1-20-2_2020.crt (in DER format )
Serial Number : 117364466776522902704657000783323376940
SHA-1 Fingerprint : 5714df60b3f5ca276413244f419c1c61496624a1
SHA-1 Fingerprint : 57:14:df:60:b3:f5:ca:27:64:13:24:4f:41:9c:1c:61:49:66:24:a1
SHA-256 Fingerprint : b268d16934ab5ba232f179cd9f5c7fc07ea8583a56a9a7c1d6cb58fe0823bf5a
SHA-256 Fingerprint : b2:68:d1:69:34:ab:5b:a2:32:f1:79:cd:9f:5c:7f:c0:7e:a8:58:3a:56:a9:a7:c1:d6:cb:58:fe:08:23:bf:5a
Signature Hash Algorithm : sha384
Subject : CN=D-TRUST BR CA 1-20-2 2020,O=D-Trust GmbH,C=DE
- Country Name: DE (Germany)
- Organization: D-Trust GmbH
- Common Name: D-TRUST BR CA 1-20-2 2020
Not Valid Before: 2020-11-24 10:13:26
Not Valid After: 2035-02-11 09:44:59
Issuer (Parent Certificate):
- Issuer Name: CN=D-TRUST BR Root CA 1 2020,O=D-Trust GmbH,C=DE
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: http://www.d-trust.net/internet/files/D-TRUST_CP.pdf
- Certificate Practice Statement (CPS) URL: https://www.d-trust.net/internet/files/D-TRUST_TSPS.pdf http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf
- No public standard audit information was found by E2Encrypted.com. We update this information regularly, check back later.
- Check its issuer’s audit information: CN=D-TRUST BR Root CA 1 2020,O=D-Trust GmbH,C=DE .

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_BR_CA_1-20-2_2020.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_BR_CA_1-20-2_2020.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4b:92:f8:08:a3:ae:18:c0:b7:a6:10:07:e4:ad:2c
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST BR Root CA 1 2020
        Validity
            Not Before: Nov 24 10:13:26 2020 GMT
            Not After : Feb 11 09:44:59 2035 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST BR CA 1-20-2 2020
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:5f:00:c9:b6:4e:b0:49:f1:b2:c4:66:59:fb:e2:
                    72:c9:cb:9d:b1:89:fb:74:be:94:92:72:7b:43:d1:
                    b5:e1:c1:b7:de:ea:b8:4c:a6:f4:c7:53:70:8c:c7:
                    8d:dd:72:ea:3a:f0:79:3b:10:c3:73:6e:1b:cc:26:
                    a7:16:18:c5:99:f4:2f:23:7a:2d:0c:08:84:99:e4:
                    af:89:a0:7f:fb:cc:7b:b1:a3:e2:41:77:53:4c:66:
                    51:b4:75:ce:e6:af:97
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                keyid:73:91:10:AB:FF:55:B3:5A:7C:09:25:D5:B2:BA:08:A0:6B:AB:1F:6D

            Authority Information Access: 
                OCSP - URI:http://br-root-ca1-2020.ocsp.d-trust.net
                CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_BR_Root_CA_1_2020.crt
                CA Issuers - URI:ldap://directory.d-trust.net/CN=D-TRUST%20BR%20Root%20CA%201%202020,O=D-Trust%20GmbH,C=DE?cACertificate?base?

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4788.2.202.3
                  CPS: http://www.d-trust.net/internet/files/D-TRUST_TSPS.pdf
                Policy: 0.4.0.2042.1.6
                Policy: 2.23.140.1.2.1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_br_root_ca_1_2020.crl

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20BR%20Root%20CA%201%202020,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

            X509v3 Subject Key Identifier: 
                2A:11:63:2D:53:75:A6:FF:A8:34:0C:12:A5:F0:36:70:0E:B6:42:67
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: ecdsa-with-SHA384
         30:66:02:31:00:dd:e8:06:e6:fb:c9:a7:8c:50:44:35:1a:49:
         dd:8e:6d:f7:57:5f:52:28:ac:d7:80:7d:78:e7:52:55:25:29:
         ca:74:f3:e1:1c:27:a0:b2:ff:69:32:97:77:7d:f7:f5:b6:02:
         31:00:f1:1d:7c:43:06:11:17:39:6c:49:66:7a:38:61:78:a4:
         7a:33:f7:b9:9f:b2:6b:4e:b6:ca:77:76:f9:85:54:14:bc:d7:
         0b:39:40:6a:30:ad:7d:11:a1:00:77:05:c6:c9

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates