D-TRUST_Root_Test_PU_CA_3_2016.crt: 2.5.4.97=NTRDE-HRB74346,CN=D-TRUST Root Test PU CA 3 2016,O=D-Trust GmbH,C=DE (Root Certificate, Expiring 2032-01-05) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_Root_Test_PU_CA_3_2016.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_Root_Test_PU_CA_3_2016.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041553 (0xfe491)
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Test PU CA 3 2016/2.5.4.97=NTRDE-HRB74346
        Validity
            Not Before: Jan  5 15:29:34 2017 GMT
            Not After : Jan  5 15:29:34 2032 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Test PU CA 3 2016/2.5.4.97=NTRDE-HRB74346
        Subject Public Key Info:
            Public Key Algorithm: rsassaPss
                RSA-PSS Public-Key: (4096 bit)
                Modulus:
                    00:bb:0a:2b:4e:01:ee:02:31:c6:57:2d:6a:f8:51:
                    5d:c1:eb:00:71:1d:4b:e1:03:f2:84:0d:35:fa:5b:
                    23:15:d9:0b:0a:00:c5:1d:eb:4a:d5:d0:82:37:6a:
                    f8:f4:90:60:97:49:ee:43:cc:f3:71:06:27:48:8f:
                    27:b7:b5:cd:28:57:49:37:a1:36:a6:5d:fe:b2:1a:
                    e8:27:8b:8b:ba:0a:6e:23:c0:e8:2a:a4:fc:c5:4c:
                    af:39:b4:f4:07:8e:e3:51:e4:77:d6:55:95:95:ab:
                    92:23:b3:01:ec:d8:f8:bf:a0:14:86:4b:94:51:a7:
                    b2:26:92:73:27:6e:a3:c2:e2:a1:38:d0:cf:f8:46:
                    f6:0f:ad:ac:59:a1:40:19:79:53:b9:46:cc:55:39:
                    0b:de:2b:e3:e7:a2:b9:1d:7d:21:a3:b4:1f:e2:0f:
                    2c:8e:d4:94:b0:f5:64:d5:fb:85:a4:f4:c2:36:bb:
                    51:c9:ed:54:75:d8:95:02:65:26:c4:b2:e2:ab:a7:
                    d9:fe:51:b7:08:4a:6c:23:0d:d6:64:ff:a0:50:32:
                    02:f7:74:dc:2b:cf:27:bb:48:70:55:a0:8a:d8:36:
                    b7:8e:7b:6a:29:ff:8f:a6:e8:0c:b5:95:08:76:24:
                    0d:46:a9:5e:6b:08:14:10:4c:d7:12:a7:28:ab:60:
                    a6:a0:44:8c:e6:9a:b9:52:46:a2:2e:17:3d:73:30:
                    25:bb:fb:9e:f7:15:e2:35:26:05:35:24:7f:d2:0f:
                    d7:e2:50:4e:ae:77:d0:53:79:86:a2:36:85:73:93:
                    d5:d1:46:8d:6a:bd:ff:9b:e4:91:cd:fc:96:c6:e1:
                    93:2b:82:53:24:fe:dd:78:0f:59:54:01:41:b0:d3:
                    47:68:62:a2:a4:3f:f3:7f:27:71:1e:f1:37:8e:34:
                    dd:b7:b2:75:76:c1:5b:c1:51:f1:f3:c7:9c:10:b4:
                    47:44:1e:fd:68:6f:43:36:40:0b:73:49:62:15:03:
                    8f:a5:13:36:e6:8d:7f:64:d5:a2:32:80:92:c3:95:
                    65:c3:45:d8:77:3a:1f:23:17:7e:f7:81:4c:a5:c0:
                    9a:5e:7d:17:f0:8d:25:e5:66:d8:d2:da:15:bd:3a:
                    0f:e1:46:6e:92:25:25:52:94:24:03:f5:ca:c8:38:
                    28:4a:81:57:3f:88:a8:77:6b:b2:d8:c9:33:48:4c:
                    82:32:3f:d5:b2:e6:9b:93:d8:07:04:f7:c3:02:7d:
                    d5:c0:8a:79:b1:c1:84:70:44:d8:84:51:72:b9:5c:
                    df:20:b8:c6:2b:b3:52:df:87:3b:9f:63:f1:c1:68:
                    ca:6f:01:e1:cf:0b:5a:2b:c9:e5:8e:6d:1b:ab:c4:
                    80:4c:a7
                Exponent: 65537 (0x10001)
                No PSS parameter restrictions
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                71:BE:9F:F0:26:89:7B:B4:0A:5E:12:62:05:E9:2A:CE:BB:53:AB:DD
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Test%20PU%20CA%203%202016,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_test_pu_ca_3_2016.crl

    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)

         19:3a:aa:bf:4b:5f:2c:7b:2e:79:d9:5e:6f:95:99:ea:23:cb:
         f8:54:43:3c:41:d1:cf:b8:44:0c:0b:d4:74:01:76:27:c4:71:
         0b:1b:4b:c0:1f:48:b7:18:d4:3a:c5:aa:c9:d6:4e:4e:54:c5:
         5d:ce:42:90:ee:8b:5b:a6:7c:01:64:36:23:90:9e:c8:d5:ec:
         af:dd:21:57:a8:d0:dd:a8:4c:d8:48:75:65:d3:2a:13:73:81:
         c6:e0:a2:59:8f:db:98:d2:b7:06:29:eb:7c:04:6f:58:9b:26:
         fb:61:6c:a8:9c:f4:09:02:25:c4:d2:74:67:b2:05:9c:fb:00:
         21:94:3e:07:5e:b0:9d:21:70:e0:20:37:a2:80:10:53:f1:98:
         4c:99:a4:76:1e:5e:7a:2a:b4:10:ba:20:41:db:d6:8d:7c:0f:
         95:59:25:ae:bf:66:db:aa:cb:bf:7c:9e:07:eb:01:8e:64:8d:
         a2:13:41:f5:da:a4:53:26:e4:82:1d:1a:58:e9:78:61:19:e1:
         d4:30:07:c4:e1:2e:d1:1f:64:9d:a7:2c:1e:bc:2c:0b:00:72:
         40:53:7c:1e:57:9f:b0:df:9b:6c:f2:67:b1:bf:ab:7e:cf:d1:
         a2:ff:b3:e0:bd:98:eb:ca:93:e1:46:06:fe:84:6f:6e:80:38:
         5b:1d:77:26:25:66:52:b4:31:b0:37:ab:11:36:5e:bd:47:e8:
         11:e9:58:1b:db:0e:37:cf:11:4d:2f:33:af:5c:9c:d6:ea:57:
         b2:9c:66:14:47:67:50:d8:a2:af:31:0c:c1:88:ef:33:27:4f:
         49:b8:ad:0d:1c:eb:7a:35:57:3d:ea:f0:16:4d:e1:b6:9d:48:
         7d:96:42:8f:a6:34:df:19:03:87:cf:63:39:21:0e:dd:7a:7c:
         89:34:ec:bd:c8:8a:e3:40:3b:35:99:5d:a3:7f:1f:4e:70:cb:
         ae:cb:7f:05:a1:b3:f0:ed:bc:82:a4:8a:48:01:ad:ad:cd:a6:
         ef:bc:b9:9d:3d:4f:65:a0:d6:fa:0a:88:ee:cd:92:7d:b8:9a:
         a4:9c:ac:df:75:51:22:f2:00:c4:2c:0c:7b:8a:ba:dc:16:55:
         fb:d8:a8:94:9b:af:18:7e:4d:7e:ff:2b:41:aa:9a:19:43:ed:
         a2:5e:4b:5d:da:33:5b:be:bd:50:88:20:69:82:bc:db:69:21:
         29:1e:f5:cf:25:6b:c1:6b:0e:63:5d:db:f2:25:f3:34:62:e9:
         54:0d:df:ad:1d:bc:40:5f:6b:27:fb:21:78:52:92:00:3f:c4:
         4f:0a:62:a7:94:dc:70:5c:e6:50:86:10:e5:5e:22:c5:31:23:
         83:93:97:55:10:4d:8a:93

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06