D-TRUST_TSU_14_2020.crt: 2.5.4.97=NTRDE-HRB74346,CN=D-TRUST TSU 14 2020,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2025-09-30) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/internet/files/D-TRUST_TSU_14_2020.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/internet/files/D-TRUST_TSU_14_2020.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3235650 (0x315f42)
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST CA 1-3 2017/2.5.4.97=NTRDE-HRB74346
        Validity
            Not Before: Sep 30 07:12:06 2020 GMT
            Not After : Sep 30 07:12:06 2025 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST TSU 14 2020/2.5.4.97=NTRDE-HRB74346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:dc:5e:a4:eb:ba:d1:60:56:11:b2:1d:3f:71:b6:
                    91:5c:81:ea:70:82:f1:ec:89:63:1b:22:64:d0:fc:
                    45:47:ce:75:0a:ca:e8:4a:e3:96:67:b2:10:7a:a4:
                    f4:6d:a2:3a:e6:f5:74:87:1b:bb:f5:7d:16:3f:cb:
                    42:92:e6:55:64:58:e1:d9:91:71:aa:04:68:88:72:
                    2f:8b:00:42:5b:aa:fa:1e:a4:4b:1a:10:5a:c9:b7:
                    70:2c:9b:e4:1e:1a:9c:59:8d:f4:90:37:df:86:70:
                    c1:ad:5d:01:57:5a:06:02:a1:a8:db:2e:c5:7b:75:
                    56:06:e0:83:df:0f:84:d8:6e:9f:67:7a:af:ac:dd:
                    82:36:33:c2:94:8e:bb:20:a0:ed:54:a1:b1:53:dd:
                    d9:95:d2:e6:07:5e:f7:dd:0c:78:34:81:50:7e:8b:
                    84:a4:7b:32:98:25:83:53:b3:20:2d:a6:f2:d4:95:
                    24:7b:d8:a5:0e:fa:c1:15:f3:19:3d:4d:c5:3f:9f:
                    46:47:ba:e9:04:05:80:7a:9a:85:09:72:be:2e:6e:
                    f8:ae:d6:b9:44:3d:e8:ea:b7:61:b2:16:5c:14:c1:
                    25:41:b7:9f:7d:30:c1:19:4c:a4:43:da:5f:3f:57:
                    ac:69:a9:8b:1d:be:4c:7a:5f:a5:e9:57:6b:e2:ed:
                    ce:0a:87:c2:68:30:09:0f:9b:4a:b0:df:16:e2:1d:
                    9f:41:52:bc:b3:85:05:66:d8:34:9d:14:f2:08:73:
                    c2:99:ed:6d:77:52:5b:0c:b4:a2:58:f5:44:06:54:
                    eb:56:74:03:05:16:f6:ae:f5:19:e4:fd:ee:3b:a0:
                    f2:08:9c:cd:de:de:42:b8:3f:7a:4b:76:4f:fd:6a:
                    1b:24:01:bb:69:cb:e7:42:98:1f:4e:e7:a8:be:e8:
                    86:09:3f:81:64:26:3e:de:18:e8:c5:91:b0:41:a3:
                    6d:e2:f3:bf:0e:d2:e1:04:ca:89:98:a0:0c:63:91:
                    56:63:84:6b:f3:a7:de:af:fd:fb:3c:66:b0:fd:e3:
                    e0:eb:98:e7:0d:b1:91:0d:31:ce:00:77:63:80:03:
                    3e:e6:ba:93:2e:37:6a:0e:c0:67:6a:77:20:97:57:
                    e1:27:0a:14:ee:b6:0d:18:27:ad:60:b0:88:5b:c3:
                    ce:d7:3e:60:47:24:a6:34:ad:72:33:aa:e9:fa:e9:
                    d1:bc:bc:e8:ad:55:67:bc:ee:42:3d:19:09:2f:a9:
                    53:8e:14:2d:f5:b4:41:f6:1d:cd:4c:91:90:86:b8:
                    64:49:4a:bb:82:39:8b:44:0f:04:1d:bb:5d:46:cd:
                    ca:15:b7:01:93:4b:5b:e6:43:2f:88:f5:87:01:d5:
                    3d:61:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Authority Key Identifier: 
                keyid:CD:FD:A8:1B:25:94:56:46:4C:2F:AC:C9:5A:46:0F:B8:27:92:28:5E

            Authority Information Access: 
                OCSP - URI:http://dtr-ca-1-3-2017.ocsp.d-trust.net
                CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_CA_1-3_2017.crt
                CA Issuers - URI:ldap://directory.d-trust.net/CN=D-TRUST%20CA%201-3%202017,O=D-Trust%20GmbH,C=DE?cACertificate?base?

            X509v3 Certificate Policies: 
                Policy: 0.4.0.2023.1.1
                Policy: 1.3.6.1.4.1.4788.2.100.3
                  CPS: http://www.d-trust.net/internet/files/D-TRUST_Cloud_PKI_CPS.pdf

            X509v3 Private Key Usage Period: 
                Not After: Sep 30 00:00:00 2023 GMT
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20CA%201-3%202017,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
                  URI:http://crl.d-trust.net/crl/d-trust_ca_1-3_2017.crl
                  URI:http://cdn.d-trust-cloudcrl.net/crl/d-trust_ca_1-3_2017.crl

            X509v3 Subject Key Identifier: 
                FE:6B:9D:1F:50:B8:60:DC:EA:C5:08:D9:27:EC:0C:73:68:A8:73:14
            X509v3 Key Usage: critical
                Non Repudiation
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)

         55:a7:20:6b:ea:29:e1:cd:73:fb:9a:0a:21:67:c8:57:9f:d6:
         c7:1a:6c:f5:76:6a:7f:ad:4f:ea:23:88:ab:eb:14:cb:1c:a7:
         85:8d:b7:1f:e8:8e:19:ec:4d:af:39:d5:85:df:b9:01:f4:35:
         36:84:58:95:97:6c:a3:c8:36:00:fb:10:ba:cf:5f:ae:a3:35:
         e2:3a:e0:d6:18:e8:7c:1c:3e:a9:3f:a7:1d:a4:71:69:fd:db:
         04:a6:23:6d:07:99:f3:c5:1f:51:32:03:dd:f1:f5:11:d8:85:
         75:6c:e9:82:80:1c:f3:c5:10:16:55:3d:90:51:4b:6e:e0:8c:
         63:bb:b3:c3:d1:fa:71:c7:2b:92:a0:9e:39:48:79:12:0b:27:
         4b:d5:f4:25:13:09:a0:e2:17:f5:65:ef:a1:70:6e:5e:09:2d:
         ef:0b:8d:c6:3a:c1:f7:75:c4:85:d8:73:47:a8:2f:3d:df:0a:
         af:ef:4c:59:43:69:8f:4d:ee:4e:a8:a6:87:da:64:20:45:67:
         d8:ec:35:61:ac:17:24:26:78:4b:15:cc:76:2c:54:1e:5d:ad:
         07:37:43:dc:22:4c:b3:38:78:47:42:3d:e8:a5:d6:0e:d2:8c:
         04:2c:20:71:0d:5c:52:b4:1f:a7:83:2c:73:ee:0d:a7:51:31:
         1a:d2:8d:66:d5:0b:e0:79:20:ad:01:3c:50:bc:bf:23:bd:b3:
         f8:da:da:2e:9d:05:e5:d6:c8:fa:04:78:7d:8b:7b:3d:52:1e:
         07:0b:b4:13:c7:eb:af:cc:15:88:ab:d4:23:80:9f:c7:6a:8d:
         2f:09:51:07:67:9c:03:b6:18:91:06:5c:f6:88:db:4b:8f:47:
         1c:16:6a:38:14:08:76:e4:25:84:7d:ec:2b:c1:5b:f7:56:db:
         87:6d:f3:75:dd:c2:80:67:d9:72:d3:e4:b6:3a:fc:d1:23:b5:
         51:80:b5:95:2d:4e:dc:49:a2:b1:e4:94:84:18:d5:ff:39:bd:
         bf:48:06:27:d3:7f:13:37:f6:d1:14:49:e4:a3:71:33:c0:77:
         78:cc:1a:a9:03:6d:ce:a1:2f:17:88:54:7e:f8:4a:67:9e:d6:
         ae:7d:69:4c:42:31:fd:33:2c:60:ff:c9:a6:1b:de:42:58:08:
         30:8f:4d:f2:67:23:5f:75:75:30:a2:6b:4d:c9:be:4b:16:12:
         66:ab:bb:bf:ff:d4:62:a1:15:11:f6:5a:a4:dc:85:58:ce:3f:
         69:f4:48:79:95:ce:a0:2a:30:a6:08:e9:11:a4:b2:ee:8a:01:
         ef:a1:94:d1:f7:5e:aa:83:d0:72:c2:73:73:cb:4c:77:4d:94:
         e5:27:d9:67:c3:28:35:75

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06