D-TRUST_CA_4-21-1_2021.crt: 2.5.4.97=NTRDE-HRB74346,CN=D-TRUST CA 4-21-1 2021,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2036-02-17) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_CA_4-21-1_2021.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_CA_4-21-1_2021.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:25:86:52:4a:84:4f:72:90:24:9b:05:73:0f:e0:87
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 4 2021
        Validity
            Not Before: Jun 24 07:35:27 2021 GMT
            Not After : Feb 17 10:19:59 2036 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST CA 4-21-1 2021/2.5.4.97=NTRDE-HRB74346
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:f5:4f:7e:2d:94:81:32:73:eb:98:c3:14:de:18:
                    0b:76:c3:bb:d8:aa:d2:a2:5e:1b:19:e4:7c:9e:bf:
                    b1:88:b3:55:36:ea:26:5e:a8:9f:38:a5:a0:6e:aa:
                    73:79:84:4a:98:59:97:ca:04:20:55:b0:06:80:7c:
                    f3:b8:4e:30:e9:e9:88:79:f6:72:75:f8:08:7c:20:
                    4f:7f:62:01:a8:7e:e3:a6:dd:a8:08:1b:82:19:13:
                    c1:3c:ea:49:76:6c:40
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                keyid:F8:6D:11:7F:40:D0:E8:15:71:19:7B:ED:79:07:49:58:6C:46:5E:0B

            Authority Information Access: 
                OCSP - URI:http://root-ca-4-2021.ocsp.d-trust.net
                CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_4_2021.crt

            X509v3 Certificate Policies: 
                Policy: 0.4.0.194112.1.4
                Policy: 1.3.6.1.4.1.4788.2.150.4
                  CPS: http://www.d-trust.net/internet/files/D-TRUST_TSPS.pdf

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_ca_4_2021.crl

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20CA%204%202021,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

            X509v3 Subject Key Identifier: 
                17:5F:85:56:60:3F:1B:0E:C7:6F:4C:1A:5D:61:76:C8:1E:62:E1:03
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: ecdsa-with-SHA384
         30:65:02:30:19:e8:27:40:08:30:d2:08:e0:fc:43:62:72:67:
         c4:98:36:54:e1:45:f9:34:46:47:6a:0f:38:40:bb:62:e4:ba:
         d0:2f:76:00:af:e4:08:81:42:a9:26:0a:c2:ad:4f:33:02:31:
         00:b4:28:29:57:1e:75:30:7d:f5:5e:e9:4e:7a:cd:ff:03:8b:
         b8:1b:fa:d1:60:54:ec:b5:bb:ac:0f:33:96:16:04:db:36:51:
         a3:e2:d8:88:88:a0:43:b1:9f:35:d4:0f:32

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06