D-TRUST_Qualified_Root_CA_3_2014.crt: CN=D-TRUST Qualified Root CA 3 2014:PN,O=D-Trust GmbH,C=DE (Root Certificate, Expiring 2019-11-17) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_Qualified_Root_CA_3_2014.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_Qualified_Root_CA_3_2014.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1415459 (0x159923)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Qualified Root CA 3 2014:PN
        Validity
            Not Before: Nov 17 14:30:30 2014 GMT
            Not After : Nov 17 14:30:30 2019 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST Qualified Root CA 3 2014:PN
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9c:27:47:00:b5:a2:02:0c:fd:6c:b0:bb:7c:
                    ac:1e:14:44:29:e4:f9:e9:e0:c0:30:ef:ba:f1:db:
                    f3:fe:65:8b:ed:dc:c5:84:81:47:75:e8:51:a5:2a:
                    48:0b:1d:3a:b5:be:d8:a4:ae:bf:5d:7f:7f:d2:89:
                    13:29:a8:ed:2b:4a:5a:33:79:aa:65:63:62:96:96:
                    67:0b:32:2d:16:3c:18:8f:12:99:2f:c0:60:c7:0c:
                    34:ce:da:86:0f:fd:a8:1e:d9:af:89:93:4e:eb:27:
                    9a:2d:89:a6:d8:4a:af:85:70:95:3d:40:9c:13:5e:
                    c1:3e:3c:9b:49:96:96:dd:42:da:4e:22:10:15:87:
                    02:07:9f:ee:b7:25:ee:dd:14:fc:b2:cd:8d:04:da:
                    03:f4:3e:12:e6:bd:dd:30:c2:58:a9:41:3f:a2:88:
                    db:83:fe:18:f7:9e:4c:d1:2f:b2:11:4b:af:d9:d7:
                    db:13:e0:42:91:9a:a0:33:4e:72:93:fc:0d:af:d2:
                    fc:17:67:fb:70:6d:a1:fe:a8:c5:50:11:39:f7:59:
                    19:5d:9d:20:de:50:61:6c:ac:7d:49:43:3c:fd:5a:
                    b7:58:c9:9f:0c:3a:55:da:a9:3d:c1:70:b4:b0:c8:
                    15:03:04:d8:2c:dd:49:dc:b5:a8:c3:f0:be:e0:57:
                    e8:c5
                Exponent: 2367957563 (0x8d242a3b)
        X509v3 extensions:
            qcStatements: 
                0
0......F..
            Authority Information Access: 
                OCSP - URI:http://qual.ocsp.d-trust.net

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4788.2.31.1

            X509v3 Subject Alternative Name: 
                email:info@d-trust.net, URI:http://www.d-trust.net
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Qualified%20Root%20CA%203%202014%3APN,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_qualified_root_ca_3_2014.crl

            X509v3 Subject Key Identifier: 
                EA:34:90:55:45:99:A8:4D:1F:A6:C9:53:6C:89:80:82:4D:D9:21:10
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         8c:f6:01:5c:59:f4:eb:ba:bd:d9:dd:d9:29:3a:cb:86:0b:e4:
         61:13:c9:16:4e:bb:8d:55:48:83:b1:d6:0b:8d:39:36:a9:88:
         1f:7b:95:48:4c:6a:c8:d7:46:c5:2e:f5:78:c4:84:d8:60:6e:
         fa:f3:9a:85:33:44:22:5a:75:7f:94:bd:6a:28:85:1a:75:df:
         29:cc:69:84:a7:00:71:8d:10:40:99:11:39:0d:8f:81:01:7e:
         00:48:bd:49:bb:94:92:2e:34:2a:35:ec:83:6b:0e:4d:e7:c4:
         1c:90:2f:90:9d:08:63:8f:c9:b8:e0:62:3e:bc:d1:1e:40:79:
         41:d3:a4:db:2f:28:0b:77:7c:0c:9a:53:79:68:83:a0:f0:96:
         40:bf:ec:29:a1:5d:c8:76:f3:57:b8:1f:38:69:ba:1d:90:d4:
         1c:10:09:48:81:b3:6c:0c:6a:af:22:d3:c1:f6:6a:50:ba:be:
         62:3b:5a:85:aa:ed:9b:4d:7b:9e:72:f2:16:e7:d9:29:fa:21:
         0a:3b:48:ee:88:3e:a7:27:ed:0a:43:9b:c8:11:b0:f7:67:d8:
         ee:90:14:a6:00:58:00:d4:9f:44:2c:12:1f:73:f8:32:14:da:
         a3:50:b4:9f:31:ef:92:5f:37:ec:37:f4:f8:30:58:02:61:3c:
         40:e1:be:28

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06