D-TRUST_Qualified_CA_3_2014.crt: CN=D-TRUST Qualified CA 3 2014:PN,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2019-11-17) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_Qualified_CA_3_2014.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_Qualified_CA_3_2014.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1415460 (0x159924)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Qualified Root CA 3 2014:PN
        Validity
            Not Before: Nov 17 14:40:38 2014 GMT
            Not After : Nov 17 14:40:38 2019 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST Qualified CA 3 2014:PN
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:99:ee:53:7f:ea:90:bd:1b:aa:fe:67:96:01:
                    06:d1:af:f2:00:57:64:cf:27:91:1e:b6:b6:1e:65:
                    ba:08:14:4f:6e:96:5a:0a:32:17:5f:84:53:72:45:
                    4b:40:54:a6:b3:3d:02:a6:66:32:c5:b0:93:bb:4e:
                    e9:a3:d5:60:00:72:64:c2:29:8a:f3:ee:11:37:b7:
                    05:08:97:56:7c:c4:70:16:88:9b:04:e3:37:e2:2b:
                    a2:a5:34:18:fd:a2:d9:41:00:f1:20:b3:71:c2:fa:
                    9c:eb:3d:34:06:db:d9:3a:cd:80:76:a4:4d:76:9a:
                    bd:12:c7:00:5f:01:9a:2f:38:3e:96:f1:1f:fb:ae:
                    5b:75:af:21:5a:fc:fc:ed:6b:e9:48:ed:23:68:a4:
                    7b:a8:95:c7:74:f2:f9:45:61:38:79:d9:80:a8:41:
                    66:4b:9a:7f:ab:c3:05:7d:9c:72:7e:89:ae:e9:57:
                    3c:c4:56:e9:8d:85:b0:8f:f6:ca:2b:af:42:e4:0d:
                    97:7e:3c:6c:a1:16:7e:bd:ef:89:a0:31:4b:3b:6c:
                    e7:4d:3d:e9:8c:03:5c:ed:a3:42:51:2e:8c:ee:8d:
                    5a:d8:b2:20:8c:09:94:7c:c0:6f:d7:4d:b6:db:fc:
                    f7:40:12:5a:dc:ef:ae:fb:c7:b8:62:0d:09:02:5d:
                    56:eb
                Exponent: 3843734317 (0xe51abb2d)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:EA:34:90:55:45:99:A8:4D:1F:A6:C9:53:6C:89:80:82:4D:D9:21:10

            qcStatements: 
                0
0......F..
            Authority Information Access: 
                OCSP - URI:http://qual.ocsp.d-trust.net

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4788.2.31.1

            X509v3 Subject Alternative Name: 
                email:info@d-trust.net, URI:http://www.d-trust.net
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Qualified%20Root%20CA%203%202014%3APN,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_qualified_root_ca_3_2014.crl

            X509v3 Subject Key Identifier: 
                BF:F7:3F:04:56:96:A1:CC:1B:DC:D4:67:91:05:FD:DA:15:A5:37:DE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: sha256WithRSAEncryption
         90:07:a0:92:15:5d:8a:01:7a:01:df:c6:e0:56:c8:c2:3c:6c:
         95:58:9c:e0:f5:f6:e7:87:c9:3a:75:ea:be:71:f6:50:6d:01:
         9a:c8:fc:d1:10:09:fe:1c:f2:7e:fa:63:41:69:cf:0e:ef:17:
         1a:7b:a4:a4:e9:07:6f:00:cf:f0:7c:6c:3c:8c:2b:3a:ec:7b:
         58:6f:f0:ad:0a:b0:7c:bc:11:6d:c6:b6:9d:75:6e:aa:c4:e7:
         4d:6b:29:ad:66:59:c1:6a:fe:56:68:72:49:60:df:ef:63:23:
         a5:1b:d0:42:1f:13:92:bd:30:22:a9:3f:0d:5e:71:31:75:25:
         24:50:be:47:91:a7:02:a7:bc:ab:9b:64:ec:8d:e9:55:1a:69:
         e0:29:29:e7:d6:c6:2f:bf:c0:7d:97:05:ff:63:d3:50:52:6e:
         4a:8c:2c:bb:9d:5a:af:ba:ad:ed:28:74:51:7b:03:f6:a4:5a:
         e4:b3:73:9e:06:10:c6:f8:41:9a:ee:10:75:d1:ee:dd:bd:89:
         ce:cd:06:32:ee:a1:cd:b0:ec:10:9c:bb:02:9e:3a:84:01:26:
         4b:31:f5:b6:fa:68:cc:4e:4e:b9:db:5d:34:1f:62:41:e2:08:
         0d:4a:38:fe:71:22:75:ac:0a:a8:46:93:aa:f4:7b:e0:c0:ed:
         f5:d2:cc:a2

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIDFZkkMA0GCSqGSIb3DQEBCwUAMFIxCzAJBgNVBAYTAkRF
MRUwEwYDVQQKDAxELVRydXN0IEdtYkgxLDAqBgNVBAMMI0QtVFJVU1QgUXVhbGlm
aWVkIFJvb3QgQ0EgMyAyMDE0OlBOMB4XDTE0MTExNzE0NDAzOFoXDTE5MTExNzE0
NDAzOFowTTELMAkGA1UEBhMCREUxFTATBgNVBAoMDEQtVHJ1c3QgR21iSDEnMCUG
A1UEAwweRC1UUlVTVCBRdWFsaWZpZWQgQ0EgMyAyMDE0OlBOMIIBJDANBgkqhkiG
9w0BAQEFAAOCAREAMIIBDAKCAQEAkJnuU3/qkL0bqv5nlgEG0a/yAFdkzyeRHra2
HmW6CBRPbpZaCjIXX4RTckVLQFSmsz0CpmYyxbCTu07po9VgAHJkwimK8+4RN7cF
CJdWfMRwFoibBOM34iuipTQY/aLZQQDxILNxwvqc6z00BtvZOs2AdqRNdpq9EscA
XwGaLzg+lvEf+65bda8hWvz87WvpSO0jaKR7qJXHdPL5RWE4edmAqEFmS5p/q8MF
fZxyfomu6Vc8xFbpjYWwj/bKK69C5A2XfjxsoRZ+ve+JoDFLO2znTT3pjANc7aNC
US6M7o1a2LIgjAmUfMBv10222/z3QBJa3O+u+8e4Yg0JAl1W6wIFAOUauy2jggHp
MIIB5TAfBgNVHSMEGDAWgBTqNJBVRZmoTR+myVNsiYCCTdkhEDAYBggrBgEFBQcB
AwQMMAowCAYGBACORgEBMDgGCCsGAQUFBwEBBCwwKjAoBggrBgEFBQcwAYYcaHR0
cDovL3F1YWwub2NzcC5kLXRydXN0Lm5ldDAXBgNVHSAEEDAOMAwGCisGAQQBpTQC
HwEwMwYDVR0RBCwwKoEQaW5mb0BkLXRydXN0Lm5ldIYWaHR0cDovL3d3dy5kLXRy
dXN0Lm5ldDCB3AYDVR0fBIHUMIHRMIGHoIGEoIGBhn9sZGFwOi8vZGlyZWN0b3J5
LmQtdHJ1c3QubmV0L0NOPUQtVFJVU1QlMjBRdWFsaWZpZWQlMjBSb290JTIwQ0El
MjAzJTIwMjAxNCUzQVBOLE89RC1UcnVzdCUyMEdtYkgsQz1ERT9jZXJ0aWZpY2F0
ZXJldm9jYXRpb25saXN0MEWgQ6BBhj9odHRwOi8vY3JsLmQtdHJ1c3QubmV0L2Ny
bC9kLXRydXN0X3F1YWxpZmllZF9yb290X2NhXzNfMjAxNC5jcmwwHQYDVR0OBBYE
FL/3PwRWlqHMG9zUZ5EF/doVpTfeMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMBAf8E
CDAGAQH/AgEAMA0GCSqGSIb3DQEBCwUAA4IBAQCQB6CSFV2KAXoB38bgVsjCPGyV
WJzg9fbnh8k6deq+cfZQbQGayPzREAn+HPJ++mNBac8O7xcae6Sk6QdvAM/wfGw8
jCs67HtYb/CtCrB8vBFtxraddW6qxOdNaymtZlnBav5WaHJJYN/vYyOlG9BCHxOS
vTAiqT8NXnExdSUkUL5HkacCp7yrm2TsjelVGmngKSnn1sYvv8B9lwX/Y9NQUm5K
jCy7nVqvuq3tKHRRewP2pFrks3OeBhDG+EGa7hB10e7dvYnOzQYy7qHNsOwQnLsC
njqEASZLMfW2+mjMTk652100H2JB4ggNSjj+cSJ1rAqoRpOq9HvgwO310syi
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06