D-TRUST_Root_Test_CA_2_2021.crt: CN=D-TRUST Root Test CA 2 2021,O=D-Trust GmbH,C=DE (Root Certificate, Expiring 2036-02-10) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_Root_Test_CA_2_2021.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_Root_Test_CA_2_2021.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:39:e3:7c:35:fa:da:1e:90:f5:c1:c7:22:78:b1:73
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Test CA 2 2021
        Validity
            Not Before: Feb  2 12:31:20 2021 GMT
            Not After : Feb 10 08:31:20 2036 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Test CA 2 2021
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:ed:74:dd:e3:e5:06:33:06:a9:b1:55:1e:b7:9d:
                    0e:f6:3a:0a:50:ad:83:f7:36:80:a7:67:07:88:a3:
                    0a:75:b8:28:32:dd:73:8f:53:33:61:03:c1:e5:25:
                    cb:95:90:fb:9b:8b:d5:ef:b9:d9:52:98:e9:29:bf:
                    ee:83:ef:9b:d4:23:98:a9:29:6e:07:b1:3b:2a:8a:
                    f3:73:55:d0:d1:08:31:e4:77:62:63:26:48:f4:f4:
                    f4:89:6b:bb:83:0f:ae
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                3D:04:44:1B:7B:46:D3:07:DA:7F:17:53:74:7B:EB:C2:30:15:86:75
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_test_ca_2_2021.crl

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Test%20CA%202%202021,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

    Signature Algorithm: ecdsa-with-SHA384
         30:64:02:30:67:9e:9c:bd:35:e8:ae:7b:78:57:2b:74:85:76:
         d8:42:66:fc:55:e1:d4:7b:b0:00:d9:c8:27:fc:c6:5c:93:86:
         69:ec:ca:ab:23:c2:03:e2:3b:13:36:eb:71:72:f1:89:02:30:
         63:f8:ed:bd:a5:fd:4f:36:bf:56:af:93:80:94:f2:13:ae:b0:
         3c:4e:40:c8:af:10:cb:f5:b1:4b:ad:f8:7e:75:ea:50:43:71:
         72:6d:35:57:40:7c:25:70:e2:df:52:38

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06