VR_IDENT_SSL_CA_2020.crt: CN=VR IDENT SSL CA 2020,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2029-11-05) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/VR_IDENT_SSL_CA_2020.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/VR_IDENT_SSL_CA_2020.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:34:39:53:cf:3a:8c:a4:2b:b4:4a:44:29:2c:ba:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009
        Validity
            Not Before: Apr 21 08:37:48 2020 GMT
            Not After : Nov  5 08:35:58 2029 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=VR IDENT SSL CA 2020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:d3:af:88:80:06:a5:85:f7:90:db:2a:2e:55:a4:
                    1e:df:01:31:84:86:1f:51:10:6b:62:cd:51:a1:92:
                    89:f0:99:2a:4f:c9:c8:3a:8e:d5:4e:b9:12:3d:2d:
                    d3:d4:ba:7a:11:6c:b8:82:9b:53:bd:5c:f1:06:14:
                    0e:ce:4c:3d:f4:2b:f2:31:17:38:e7:26:ee:d9:7c:
                    c9:11:c6:d1:0b:8e:21:7d:f9:3f:52:40:34:36:80:
                    b4:95:e7:8f:95:71:ef:b9:f5:9d:36:ef:c3:f2:cc:
                    49:05:2a:1f:ff:97:3f:b2:be:23:75:8e:1c:dd:8a:
                    ce:6d:48:59:64:82:3f:32:76:d3:1e:dc:1b:8b:4a:
                    57:9a:0f:a6:e4:1d:45:c2:fe:ac:53:08:9e:81:e2:
                    1a:ca:ed:e4:5c:ba:cc:94:40:dc:63:22:c5:48:01:
                    08:6e:89:dc:27:3d:93:7c:e8:a2:10:d8:a9:c8:cb:
                    b7:47:c0:ac:b1:2b:1a:40:5a:6d:51:97:5c:02:a2:
                    eb:62:1e:9a:28:52:24:87:88:01:8d:46:76:c4:87:
                    04:7f:2b:ce:1c:ff:91:e7:65:cf:5e:e5:a0:01:eb:
                    be:e6:ac:93:18:b5:dd:44:d9:20:a3:3a:eb:19:10:
                    3f:8c:ce:2a:a4:cc:df:35:5e:8e:00:46:76:fc:60:
                    56:53:67:f3:17:92:88:26:d5:39:e3:b2:d8:78:d0:
                    68:b7:09:e6:97:7b:5f:85:7e:27:e8:8b:a6:88:70:
                    a6:8c:60:e2:ca:93:48:3f:a5:81:66:a7:c2:97:33:
                    98:ae:c3:e6:84:53:05:3a:82:d9:76:d7:84:dc:26:
                    d0:d8:25:08:6d:e5:69:2b:3a:69:f4:33:f1:7c:08:
                    e3:15:08:97:c6:54:5c:92:b8:5d:ae:dd:53:06:96:
                    77:d5:5f:ab:1c:4a:95:14:4f:20:74:2c:6c:df:6d:
                    70:d6:8f:8f:03:26:0f:44:18:69:2a:7d:13:bb:10:
                    5c:0e:cc:bb:10:79:0c:27:d2:29:59:6f:e8:58:2e:
                    d5:25:68:22:69:b9:8a:57:2f:91:c3:59:39:a1:db:
                    92:df:8d:d7:f7:af:60:98:bb:1f:96:70:b9:a0:0a:
                    bb:a6:9f:4f:cf:73:90:a5:2b:f5:16:93:8f:e6:37:
                    8c:0e:41:85:16:23:d7:d4:9d:c0:19:7f:e8:36:2a:
                    4a:94:02:b8:80:de:d5:fb:58:1b:8c:2c:15:15:b5:
                    7b:9c:dd:e8:62:5e:93:57:a5:9f:c8:79:aa:4b:67:
                    86:06:b4:b5:7b:37:f6:aa:ea:79:47:9c:d0:21:7d:
                    5d:b9:1b:4e:e5:43:c3:14:ee:11:fc:f8:b7:54:12:
                    5f:f8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                keyid:FD:DA:14:C4:9F:30:DE:21:BD:1E:42:39:FC:AB:63:23:49:E0:F1:84

            Authority Information Access: 
                OCSP - URI:http://root-c3-ca2-2009.ocsp.d-trust.net
                CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_Root_Class_3_CA_2_2009.crt
                CA Issuers - URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4788.2.230.2
                  CPS: http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf
                Policy: 0.4.0.2042.1.7
                Policy: 1.3.6.1.4.1.4788.2.202.2

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_2009.crl

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

            X509v3 Subject Key Identifier: 
                C9:1C:64:68:AC:6C:18:CA:21:D5:4D:54:7B:53:56:A2:90:93:AA:91
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: sha256WithRSAEncryption
         4f:71:9c:14:90:ad:37:03:ad:62:34:23:ab:71:b3:0c:6f:23:
         14:9f:1d:9c:3e:9d:e7:83:79:11:e6:ff:1b:48:af:36:c4:75:
         54:82:fe:4b:29:44:09:e9:0f:dd:0a:a4:a4:b8:31:ec:22:cb:
         1c:84:44:b5:ce:22:80:c1:3e:45:76:42:dc:70:ac:57:57:2b:
         88:a2:e3:cd:0f:8f:6e:b3:15:b6:be:92:92:4d:bc:83:8a:ec:
         d7:84:9b:af:a4:39:00:0d:87:39:37:4a:5d:80:82:1c:4e:77:
         9e:f6:f6:85:3e:d2:39:6a:c4:55:b8:cb:e6:57:81:d8:98:b9:
         d8:c1:84:a7:bf:55:a7:75:df:8c:7d:14:46:a7:2d:d4:97:77:
         1e:b2:d1:fc:c0:51:4f:e4:1f:c5:bd:f9:54:09:ae:fe:52:64:
         88:0a:ef:83:10:fa:88:ae:62:16:4c:38:65:a6:e2:b8:ac:86:
         ec:72:60:18:3f:36:f1:2d:b3:b1:fb:78:ff:11:de:71:c2:0c:
         a6:eb:56:eb:af:37:93:ff:b6:82:60:f5:35:65:d6:5f:81:d9:
         36:a9:44:19:9c:be:95:6f:87:95:7e:0d:38:63:db:68:a7:57:
         e5:65:0c:1e:7a:e2:38:43:cc:f5:8b:80:4c:5c:dd:fa:a7:62:
         72:32:b0:48

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06