D-TRUST_CA_1-21-2_2022.crt: 2.5.4.97=NTRDE-HRB74346,CN=D-TRUST CA 1-21-2 2022,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2036-02-17) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_CA_1-21-2_2022.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_CA_1-21-2_2022.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:27:65:8b:57:73:f8:a3:1b:bb:27:f7:96:dc:bc:ec
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 1 2021
        Validity
            Not Before: Aug 23 07:07:47 2022 GMT
            Not After : Feb 17 09:39:59 2036 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST CA 1-21-2 2022/2.5.4.97=NTRDE-HRB74346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:9b:be:7e:04:98:f0:f0:19:a8:e8:fe:3b:00:b3:
                    63:f6:cb:76:a9:07:32:42:69:25:43:29:53:d6:a2:
                    18:4d:ca:c3:a3:88:6c:64:b1:8f:85:3a:99:94:24:
                    94:6a:98:0a:fd:94:d3:ba:2f:05:a8:ff:ae:62:1a:
                    3d:83:c9:0d:d1:e6:12:b3:24:a0:68:31:64:33:5e:
                    01:ed:fc:b2:6a:12:0c:ea:d2:00:db:13:bc:e3:ae:
                    28:03:76:d6:af:1d:86:34:8d:63:2e:f5:e2:34:12:
                    7a:70:9b:fb:d2:6e:e9:12:8c:46:c1:a3:39:09:5e:
                    45:3c:97:a1:9e:79:ae:aa:5d:1e:98:71:b3:22:9a:
                    4b:35:57:9c:01:a2:57:4c:0f:b2:5b:ce:c7:30:37:
                    79:50:e9:b4:d4:52:ff:19:5f:c7:98:f4:29:8d:32:
                    eb:e5:dd:9c:9e:78:2c:c9:02:54:4c:83:bf:45:a2:
                    59:f1:91:f8:5c:04:66:b3:ce:c0:d7:c6:ae:b1:94:
                    8e:bc:57:6d:8b:40:e1:b6:b5:89:b1:72:31:b7:4b:
                    66:a8:92:b4:af:75:d4:4a:1e:4d:7b:63:c4:8d:04:
                    18:64:16:8c:0c:9a:64:bc:29:63:b7:7a:11:f4:48:
                    65:89:65:49:ed:97:33:19:d0:a7:0f:99:38:82:e1:
                    56:ca:88:86:02:ca:c3:c5:14:67:45:0b:2b:9f:31:
                    cc:f1:ab:18:17:0b:61:4c:68:b2:22:fb:18:38:1b:
                    57:99:53:25:7b:6b:c3:67:7d:8a:81:0f:07:67:dc:
                    e8:14:91:9e:e7:1f:57:42:99:f4:74:0c:5e:ff:6f:
                    89:0d:7a:7f:22:b9:66:8f:1a:65:f4:c3:c1:12:9d:
                    80:5d:67:8f:5a:16:11:b5:51:7c:b4:f0:1a:3e:7d:
                    6b:d8:a3:dd:e8:a0:15:07:fd:26:6e:d0:d3:c7:2e:
                    97:e4:5e:86:c8:58:23:e6:9f:68:34:d0:36:a6:5d:
                    13:b5:9a:c7:dd:91:63:00:60:79:fa:71:1c:b6:78:
                    38:bc:e2:ec:d8:41:9e:62:dc:af:3f:82:f1:fb:a7:
                    3a:6f:1e:67:3c:1e:e7:12:67:a9:bd:27:e8:0a:a9:
                    48:23:5e:c5:83:7a:69:4e:f2:72:57:c1:fc:c7:33:
                    23:90:86:1c:b6:5e:32:6d:e0:1c:30:e0:83:ef:80:
                    47:0b:ad:0d:09:d0:4f:20:60:eb:74:e6:ad:05:6b:
                    16:08:29:d0:10:0e:c8:6b:2e:b1:8a:4d:c2:f8:0d:
                    2b:2f:13:ba:74:41:db:b9:5f:e4:f9:6d:e1:e2:1f:
                    d2:96:44:eb:b8:3f:0c:a7:d9:1b:7e:23:07:a7:c5:
                    3f:ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:54:AE:30:E3:98:1C:8B:13:CC:6F:1E:D8:F0:44:A6:6F:E4:05:B7:F3

            Authority Information Access: 
                OCSP - URI:http://dtr-root-ca-1-2021.ocsp.d-trust.net
                CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_1_2021.crt

            X509v3 Certificate Policies: 
                Policy: 0.4.0.194112.1.3
                Policy: 1.3.6.1.4.1.4788.2.100.2
                  CPS: http://www.d-trust.net/internet/files/D-TRUST_TSPS.pdf

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_ca_1_2021.crl

            X509v3 Subject Key Identifier: 
                1E:CC:98:08:B7:4D:49:2B:9F:2F:58:60:C8:5A:39:8A:23:62:56:32
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)

         30:7f:ae:aa:00:de:a4:0d:8c:a8:28:e4:20:a8:30:be:ea:29:
         16:14:9e:17:7e:67:db:99:cb:37:04:80:f2:61:6d:75:0b:51:
         ca:7d:20:6c:c4:69:e5:59:39:80:04:ed:b6:8c:25:03:7a:00:
         74:c5:0a:3f:d0:d0:e3:05:d9:44:b0:0b:27:80:fa:c0:12:f1:
         a8:23:d0:b2:a6:a2:24:80:90:75:2f:d7:03:e0:db:f0:b8:c8:
         8a:e4:c8:90:50:66:b6:8f:aa:d9:ea:02:f3:b0:34:08:5a:c0:
         95:6f:bb:e5:6c:7f:94:ff:6f:60:20:ef:63:e6:02:2d:b7:23:
         68:24:a1:31:28:7b:64:89:8d:5e:49:60:18:b8:73:64:d4:36:
         5c:8f:08:a1:ab:87:c8:4f:60:1d:49:3d:26:b8:58:bc:16:a4:
         36:de:d3:c5:4a:73:83:83:6a:31:84:f3:a0:09:68:3a:78:fc:
         1b:20:33:8e:5b:66:a1:18:b2:26:4b:c3:b3:55:11:30:47:58:
         5c:fe:33:29:53:bd:91:fa:68:fe:d9:38:c0:a7:9f:e9:b5:8e:
         a9:59:f4:94:7e:f6:ba:ef:ef:f2:4f:3d:78:5c:3b:cc:48:91:
         8c:32:65:68:ed:83:f4:34:9c:cc:27:34:33:75:18:a8:f0:ca:
         f8:a9:7c:4f:c2:f2:44:71:a7:aa:de:60:f5:18:cb:8e:f7:89:
         25:c2:15:04:24:fb:c5:c1:fd:64:fe:95:ae:10:df:e4:67:7b:
         96:25:a0:5a:2a:35:1d:8e:1e:5a:05:18:92:40:51:15:4d:de:
         4b:82:7b:dd:0a:b6:71:1b:ac:31:06:e2:c5:1e:bd:58:7c:b3:
         38:cc:46:de:e8:d4:ef:cb:4e:6b:31:de:38:46:fc:a1:91:5e:
         53:22:d3:95:e6:46:5a:f6:b9:d7:81:7d:a6:3e:a5:5b:b3:e0:
         66:7d:7f:75:e1:2b:fe:df:c4:6a:f8:07:ce:b7:25:cb:ef:77:
         c0:1e:f2:25:2b:a6:a3:38:5a:23:70:6b:4d:96:8f:9b:c5:09:
         0e:2b:ba:1e:ed:15:d5:00:7f:34:3a:fb:bd:01:46:be:9c:73:
         8f:a7:f8:fe:af:a3:ff:7b:13:34:3a:2d:9f:bd:97:68:83:e5:
         af:12:9c:15:3b:2b:9a:2e:d0:29:d7:37:fd:d3:18:23:10:0b:
         b3:07:be:49:30:cb:5b:9d:35:8f:4b:94:a6:46:3e:63:11:f4:
         df:ac:b4:b6:05:f2:78:19:75:b2:2d:76:0a:86:02:1d:e9:e5:
         92:35:cc:60:17:54:15:b4:cb:15:30:f7:fc:3f:7d:bf:8a:8c:
         d9:27:be:30:c3:da:76:8b

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06