D-TRUST_Qualified_CA_4_2012.crt: CN=D-TRUST Qualified CA 4 2012:PN,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2017-03-22) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_Qualified_CA_4_2012.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_Qualified_CA_4_2012.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952167 (0xe8767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Qualified Root CA 1 2012:PN
        Validity
            Not Before: Mar 22 19:16:40 2012 GMT
            Not After : Mar 22 19:10:46 2017 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST Qualified CA 4 2012:PN
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:38:b8:23:8e:3f:3a:36:10:07:44:fa:9d:
                    a7:6f:84:1a:02:80:44:36:12:a7:ef:70:b3:f2:98:
                    98:7f:6d:d2:de:f5:df:8f:b3:63:d2:c8:5f:78:08:
                    7b:97:29:48:d6:79:7b:1c:c8:6c:35:91:3e:66:d7:
                    2f:37:19:54:db:e4:04:55:79:5d:01:3f:6b:45:fa:
                    94:fc:aa:74:95:40:30:20:ac:3e:3a:47:14:b7:5d:
                    7b:11:dd:1e:44:f5:6c:ec:e7:3f:c9:9a:03:c5:de:
                    20:96:3a:c6:63:1a:fe:39:69:fe:dd:9a:79:dc:3b:
                    8b:09:4b:2e:55:bb:be:c6:e7:99:0d:4c:cb:89:b2:
                    23:11:d0:90:29:cd:76:93:5a:6a:81:80:90:7f:db:
                    b1:c4:f4:39:91:4c:ad:e9:1d:96:d7:11:64:ea:1e:
                    1d:84:1c:e3:97:5c:74:6a:33:6a:94:1f:08:0c:d4:
                    72:96:54:2f:0c:ef:9c:c1:06:7d:6c:c3:c6:3d:45:
                    4c:fd:f4:56:4e:58:22:5e:a2:c0:cf:fc:ac:9e:e0:
                    a9:a6:f3:0e:59:0e:81:d2:05:32:0c:fe:fe:76:74:
                    2d:b9:c5:31:67:36:44:98:dd:cb:97:ca:8a:bd:b2:
                    4f:dd:dd:31:a3:49:c7:24:77:d4:db:55:21:da:49:
                    b2:5b
                Exponent: 2716868449 (0xa1f01f61)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:62:B9:03:BA:4B:BD:F7:5E:5A:33:8D:ED:C9:90:DD:A6:B6:F0:1A:77

            qcStatements: 
                0
0......F..
            Authority Information Access: 
                OCSP - URI:http://qual.ocsp.d-trust.net

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4788.2.31.1

            X509v3 Subject Alternative Name: 
                email:info@d-trust.net, URI:http://www.d-trust.net
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Qualified%20Root%20CA%201%202012%3APN,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
                  URI:http://crl.d-trust.net/crl/d-trust_qualified_root_ca_1_2012.crl

            X509v3 Subject Key Identifier: 
                2D:9F:A7:ED:FB:0E:37:9C:CF:8B:39:AC:86:CC:69:50:2A:62:7A:D3
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: sha256WithRSAEncryption
         2b:1f:18:57:c0:86:01:98:a0:93:aa:97:e0:64:07:36:33:c2:
         86:96:ff:f7:fc:28:ce:6c:93:ba:0c:83:57:da:4f:10:dd:b8:
         6c:40:a2:a1:00:17:64:ca:0b:17:38:25:ab:5d:73:e9:0e:02:
         f5:40:2e:a1:1c:d6:0b:97:53:75:9b:0a:50:42:2a:c3:76:6a:
         11:9c:d7:c8:79:46:f3:68:69:1a:d7:f9:8c:d0:d6:44:e3:6f:
         2a:f0:71:a5:22:97:85:0f:66:da:0b:ec:88:cc:b5:54:99:fb:
         ff:b8:e1:2e:5a:6f:02:bc:0e:36:b0:f6:a0:2e:b2:9b:56:b8:
         65:42:12:0f:7a:fc:92:1c:d5:76:23:ad:f0:29:9c:41:cd:b8:
         83:c9:7f:13:10:71:00:dd:20:81:20:5c:d6:79:6e:28:9f:75:
         4e:1f:5f:ff:31:fa:1b:da:91:4b:99:c7:8b:62:69:e5:9d:63:
         09:2f:c4:5f:f3:37:be:10:8d:d5:64:08:a3:2d:f7:42:48:5e:
         fe:8c:95:76:10:0a:69:60:21:9f:f7:52:59:2f:7a:ff:65:c9:
         88:c8:0e:a2:92:72:5a:52:48:9f:b3:a4:bb:65:a2:0e:40:c0:
         17:93:da:d0:08:b7:57:ca:ad:93:dd:48:0a:58:23:25:b6:89:
         e9:a1:85:99

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06