D-TRUST_Root_CA_4_2021.crt: CN=D-TRUST Root CA 4 2021,O=D-Trust GmbH,C=DE (Root Certificate, Expiring 2036-02-17) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_4_2021.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_4_2021.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b5:85:e6:65:fb:12:e0:ed:36:39:2c:aa:7a:cb:1b
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 4 2021
        Validity
            Not Before: Feb 17 10:20:00 2021 GMT
            Not After : Feb 17 10:19:59 2036 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 4 2021
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:f5:3c:3f:ae:fe:e6:74:97:d4:5c:cc:1e:85:05:
                    39:08:71:da:67:57:06:49:6b:cf:73:63:ef:82:7f:
                    6d:ac:79:25:8f:0a:4a:79:4f:7f:5e:b5:52:04:f3:
                    71:85:60:03:62:a5:35:5f:a3:df:01:4f:9e:f5:f1:
                    c6:06:d3:b1:f4:b0:ce:66:ef:c5:db:de:87:eb:a5:
                    e0:af:a0:97:0a:cc:33:8f:9c:db:3b:d3:72:10:84:
                    d8:b2:59:a8:6d:f1:4c
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                F8:6D:11:7F:40:D0:E8:15:71:19:7B:ED:79:07:49:58:6C:46:5E:0B
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_ca_4_2021.crl

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20CA%204%202021,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

    Signature Algorithm: ecdsa-with-SHA384
         30:66:02:31:00:fc:62:29:d5:44:0b:29:c1:46:19:ad:84:51:
         e5:40:cd:fc:93:3c:7f:0c:d4:68:25:b1:1d:9b:d1:a1:a7:07:
         d7:96:77:4e:48:48:1a:3b:c2:f3:19:b2:b5:8f:e4:f9:ce:02:
         31:00:a2:ff:79:e6:3d:1f:3a:ef:85:41:aa:65:53:dc:96:4c:
         f7:58:b8:89:be:4f:3b:2d:b0:5b:f9:e1:1b:d1:03:4b:04:3f:
         fc:ab:a5:0a:71:9d:47:c2:cf:20:16:43:c2:53

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06