D-TRUST_CA_1-21-3_2021.crt: 2.5.4.97=NTRDE-HRB74346,CN=D-TRUST CA 1-21-3 2021,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2036-02-17) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_CA_1-21-3_2021.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_CA_1-21-3_2021.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ef:fd:ed:21:1d:75:06:d9:06:0c:35:4e:2a:68:e0
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 1 2021
        Validity
            Not Before: Jun  1 08:08:45 2021 GMT
            Not After : Feb 17 09:39:59 2036 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST CA 1-21-3 2021/2.5.4.97=NTRDE-HRB74346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:d0:3b:6e:ce:1c:d1:e3:78:16:82:6c:fd:d6:7a:
                    41:4d:1f:0e:47:54:ee:22:1c:60:3b:d7:71:eb:a3:
                    d2:16:b2:dc:96:50:f6:5a:ef:5c:bd:06:a5:9a:35:
                    d2:98:ba:72:e1:29:fa:da:7f:d7:71:9d:62:1e:8b:
                    f7:f8:e7:e4:ce:58:1b:27:9f:42:ba:e4:27:23:79:
                    b1:4b:d9:cb:21:b5:a0:a5:dc:c4:e8:e1:95:3d:59:
                    f2:4e:09:09:07:d6:96:a6:44:bb:87:da:17:01:f8:
                    c9:91:93:4d:e2:52:51:f4:cb:b4:ba:cc:24:75:8e:
                    47:3c:70:d5:c3:a9:c1:7b:21:a5:ce:ce:4d:a7:cd:
                    f6:7a:5a:fc:6b:e9:3e:48:22:e1:ba:ce:a3:af:bd:
                    e2:5b:34:ad:2c:ba:48:15:18:4f:49:8d:53:7c:c4:
                    91:78:ac:44:86:aa:8d:ce:60:c8:81:e8:84:83:fa:
                    91:03:a9:c0:25:3f:5f:4d:71:3c:e8:84:70:7a:6a:
                    1d:28:7c:9c:a8:a9:ef:72:0f:d9:b3:e2:a3:dd:3a:
                    dc:af:b6:18:e3:1c:be:ef:32:bd:ea:9e:ea:86:8f:
                    8d:39:ed:af:d7:43:5e:d0:75:96:ac:e1:01:23:81:
                    24:32:18:47:b7:2d:a9:8f:14:4a:8c:cd:7d:0d:83:
                    ed:6f:cb:4f:de:58:8a:1d:ff:c8:ab:47:f0:54:69:
                    2f:4d:4f:69:e8:3e:50:42:8b:59:99:ef:9b:56:04:
                    40:8b:d8:b2:44:25:c8:8d:e8:34:41:ab:38:d0:3c:
                    85:75:1b:ad:b7:52:6b:77:b9:6a:5c:28:7b:99:af:
                    39:ba:01:b4:92:df:54:67:6b:62:e4:7d:c1:92:5c:
                    df:61:7d:8d:88:71:8c:94:08:3d:d2:e4:cc:b0:19:
                    a5:56:d8:eb:d0:b9:35:25:6c:dd:12:36:eb:76:12:
                    68:fc:d4:e9:dc:d1:de:fd:e3:48:e9:4b:12:8b:9d:
                    c4:ef:c7:58:38:cc:de:43:26:87:8f:09:48:92:80:
                    46:79:d6:c3:0e:d5:65:2d:5e:8b:b3:08:a6:bf:f8:
                    ab:72:ca:ea:ee:37:7c:2c:5d:7e:7c:86:06:db:99:
                    23:7b:d3:4f:cb:6c:9b:b4:fc:1a:9f:21:b9:f3:78:
                    3d:93:f0:79:d9:8e:73:7a:3b:01:10:16:92:e0:76:
                    ef:15:87:80:ed:48:e3:7c:b8:11:32:4c:dc:cb:e7:
                    5f:12:af:98:7f:1a:20:8f:68:53:aa:f5:8b:15:7a:
                    86:8d:fa:b9:10:c2:f6:8f:33:72:ce:ea:0e:84:d3:
                    c8:ef:5d:2f:47:be:71:af:39:3a:c6:fb:3d:7e:56:
                    6a:b3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:54:AE:30:E3:98:1C:8B:13:CC:6F:1E:D8:F0:44:A6:6F:E4:05:B7:F3

            Authority Information Access: 
                OCSP - URI:http://dtr-root-ca-1-2021.ocsp.d-trust.net
                CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_1_2021.crt

            X509v3 Certificate Policies: 
                Policy: 0.4.0.2023.1.1
                Policy: 1.3.6.1.4.1.4788.2.100.3
                  CPS: http://www.d-trust.net/internet/files/D-TRUST_TSPS.pdf

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_ca_1_2021.crl

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20CA%201%202021,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

            X509v3 Subject Key Identifier: 
                67:73:E0:E2:78:3F:A5:3F:B7:37:0F:4E:EF:27:2A:8C:38:97:D4:71
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)

         83:16:13:86:06:c3:2f:d3:d3:f5:9b:77:ab:aa:55:df:7e:a2:
         91:fd:c6:19:8e:11:9b:79:1e:a6:16:13:4f:51:38:31:1e:89:
         40:20:5c:e2:9f:46:42:04:58:3a:1b:0c:e3:f4:17:05:06:d4:
         20:07:18:31:65:39:61:06:97:20:05:75:c7:59:cc:3a:fc:1e:
         aa:fc:9e:24:c8:60:f7:f1:db:7a:f4:e8:df:10:5b:1d:26:60:
         b3:1a:9d:94:ea:87:a9:10:4f:9e:2c:c2:4f:20:b5:cf:e2:ef:
         48:a7:84:1a:27:71:94:f2:da:e6:83:32:e6:18:b1:bb:7a:46:
         04:8b:a9:16:d9:37:b5:65:f1:e2:0c:05:db:9d:ee:07:bb:d8:
         38:17:68:c5:5d:63:45:04:73:ed:5b:20:66:0b:c9:4a:96:01:
         ee:b7:5d:d8:5f:94:6c:fa:49:2e:0e:35:2a:cc:c7:ba:03:b6:
         ea:12:b4:55:87:45:4d:3e:36:ae:fb:e1:b2:e6:33:c2:bd:86:
         b4:85:61:28:10:46:72:c7:3b:b0:46:01:e5:83:e1:36:82:b5:
         4a:cf:66:02:61:9e:90:fc:2a:8b:20:ef:8c:10:40:70:b7:6e:
         5f:f3:dc:67:97:79:49:2c:99:64:e3:da:f4:d2:36:66:05:ad:
         4f:cd:40:ba:77:6a:2d:be:46:63:bd:59:39:76:68:e1:87:31:
         dd:b7:72:0c:95:72:44:7d:2d:20:a7:6f:d6:f9:09:fc:25:2a:
         10:54:3b:50:a4:81:47:bb:1e:b5:2a:83:1e:20:b2:da:9f:e0:
         e7:f5:c2:ad:74:de:97:e4:a4:22:1f:85:df:18:94:7a:ca:d2:
         01:41:fd:64:26:71:d8:64:a1:d1:8b:28:fc:bd:35:03:0c:ed:
         e4:48:e4:d9:02:21:00:7d:17:e9:db:16:22:b9:45:c2:4a:9b:
         21:b7:fe:5c:14:1a:20:76:7f:fa:31:72:57:10:81:3c:40:92:
         4b:a3:dc:1b:89:f6:db:07:17:f4:1a:5d:1f:bc:89:ad:77:ff:
         f2:f9:81:ee:88:a2:26:5d:ba:73:73:18:97:25:50:55:da:2e:
         59:53:ad:32:23:96:aa:72:3f:b2:84:70:c4:55:16:a9:b5:f9:
         39:60:dc:be:60:44:70:2a:b7:07:60:e4:1e:1c:27:1b:f2:12:
         44:fd:24:b9:59:4f:3a:a0:85:d3:3d:ec:c9:84:0f:33:2f:76:
         61:c3:85:e1:de:da:e1:45:8f:7a:a9:f0:5c:e2:0c:2b:7a:29:
         5f:cb:92:11:bd:f4:f5:d5:59:68:18:a4:ed:c9:22:3e:52:95:
         0a:87:65:8e:73:04:af:c4

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06