D-Trust.HBA-qCA4.crt: CN=D-Trust.HBA-qCA4,OU=Qualifizierter VDA der Telematikinfrastruktur,2.5.4.97=NTRDE-HRB74346,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2022-12-31) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-Trust.HBA-qCA4.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-Trust.HBA-qCA4.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fe:e3:f2:17:12:90:f6:52:d1:be:67:08:5d:d1:8a
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha256
         Mask Algorithm: mgf1 with sha256
          Salt Length: 0x20
         Trailer Field: 0xBC (default)
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 3 2016/2.5.4.97=NTRDE-HRB74346
        Validity
            Not Before: Jan 17 08:56:24 2019 GMT
            Not After : Dec 31 19:59:59 2022 GMT
        Subject: C=DE, O=D-Trust GmbH/2.5.4.97=NTRDE-HRB74346, OU=Qualifizierter VDA der Telematikinfrastruktur, CN=D-Trust.HBA-qCA4
        Subject Public Key Info:
            Public Key Algorithm: rsassaPss
                RSA-PSS Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:d9:bb:2e:49:b5:82:9c:8f:26:a8:b3:e4:
                    d6:28:a0:ec:b9:35:40:56:82:48:74:62:2a:26:e7:
                    82:94:c3:fe:d6:20:05:83:7c:5d:98:82:64:4d:40:
                    91:b4:a4:5c:a5:6f:7d:ef:0d:00:8f:ee:4b:7e:93:
                    7e:cb:8b:75:47:3e:57:e5:c4:83:bf:bc:9d:eb:b5:
                    1f:46:0a:e5:4d:c7:b7:c4:c6:6b:b0:34:80:7c:fa:
                    22:d8:24:51:5a:32:be:80:02:4f:60:a9:1c:aa:19:
                    44:3c:0b:12:d2:11:71:da:eb:f7:45:1e:50:af:e2:
                    70:ad:d3:69:c8:40:d9:27:37:49:5e:e1:d6:cd:4d:
                    63:c0:28:cf:5a:b2:0f:5a:79:7e:80:e8:dd:76:0a:
                    f5:de:95:46:17:3c:31:59:1e:fc:2d:cd:86:79:98:
                    32:5f:7a:14:fe:6f:70:95:3c:3d:3e:dd:2f:15:93:
                    94:fd:c4:3c:0b:ee:db:0f:8e:0c:9d:74:bc:71:5c:
                    8d:e8:c1:2e:be:ab:58:34:68:14:d0:18:3f:f5:45:
                    25:c5:b6:c9:6a:eb:0a:ac:e9:bd:d2:09:0f:59:ff:
                    94:74:8a:d1:a2:1d:0e:13:27:b6:76:fd:e2:7c:ce:
                    3f:17:e0:fc:b6:03:30:09:68:d7:6f:d1:39:d5:de:
                    ec:c1
                Exponent: 65537 (0x10001)
                No PSS parameter restrictions
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DC:C0:12:BD:88:3D:63:13:8C:34:AB:DB:CE:8B:32:C4:11:4E:5D:E7

            Authority Information Access: 
                OCSP - URI:http://root-ca-3-2016.ocsp.d-trust.net
                CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_3_2016.crt

            X509v3 Certificate Policies: 
                Policy: 0.4.0.194112.1.2
                Policy: 1.2.276.0.76.4.145
                Policy: 1.3.6.1.4.1.4788.2.211.1
                  CPS: http://www.d-trust.net/internet/files/D-TRUST_TSP-TI_CPS.pdf

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20CA%203%202016,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
                  URI:http://crl.d-trust.net/crl/d-trust_root_ca_3_2016.crl

            X509v3 Subject Key Identifier: 
                FD:4B:9E:AF:07:B4:64:F9:6B:35:C5:54:01:63:86:BE:9D:D4:29:D9
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.4.1.8301.3.5: 
                0..
+.....m...
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha256
         Mask Algorithm: mgf1 with sha256
          Salt Length: 0x20
         Trailer Field: 0xBC (default)

         5f:c1:f6:3e:c2:ec:a0:0a:ed:c8:f4:ff:9f:cc:4d:27:12:67:
         0b:ce:95:c0:23:8a:94:0d:87:d6:2e:46:fb:fa:6a:8e:38:a6:
         06:24:31:3e:53:46:67:78:e3:7f:79:f4:4b:fb:e0:9e:0c:d1:
         46:2e:8e:7e:01:1a:7a:0b:38:a7:c1:28:74:4e:20:c6:f8:15:
         19:47:db:f1:bd:15:26:9c:08:bc:a1:94:45:b9:48:3b:e1:37:
         12:16:37:ba:60:34:8f:f9:8a:c2:b8:1b:74:07:ac:3f:4d:c3:
         6b:45:6c:77:7c:e5:fd:a0:3c:fb:f6:88:f7:1e:ef:ae:c5:ff:
         94:d8:4c:d7:f0:23:60:f1:b5:54:f3:24:bc:49:d7:2f:47:42:
         04:af:0a:fb:24:59:67:5a:f3:e3:36:6d:60:d0:06:26:d5:75:
         43:5e:17:ff:e9:07:36:86:ce:d4:be:d7:d5:b6:f6:47:fb:70:
         b0:e2:36:20:6d:34:df:90:a5:f6:c8:19:86:29:8a:6b:37:2b:
         51:3d:f6:c8:91:b5:e9:61:52:f8:27:29:8a:0f:a7:2c:f2:41:
         a5:22:ce:b3:37:8f:91:8e:66:4e:16:37:87:52:33:1c:e7:7e:
         b0:fd:f0:4d:0e:1d:30:a9:04:8e:ad:39:79:27:58:f5:ec:84:
         ce:67:67:76:6a:64:ba:57:87:76:9a:ce:1e:40:b2:02:1e:3f:
         f4:bb:48:0b:e3:74:96:97:a1:4a:0a:3e:86:c6:92:56:2c:df:
         49:70:45:6d:1a:d0:af:b0:34:c4:8b:80:07:f3:12:ab:1b:c6:
         55:2b:6e:21:f2:4d:72:3f:e6:52:ca:66:02:44:e1:1a:4a:14:
         3d:4c:a5:67:dc:46:e7:bd:fa:6b:c5:df:ba:f2:e9:e5:e6:69:
         0f:95:8f:a5:66:95:88:fa:66:d2:31:20:41:ea:f5:d6:b7:84:
         47:b3:0c:09:ad:b9:fc:a1:9f:16:bf:78:4d:7b:42:a5:b2:dc:
         d3:99:56:62:4b:a5:86:c7:3c:c1:28:f2:7d:02:d3:da:1e:2e:
         18:85:2a:6b:1f:11:52:7c:28:86:4b:f4:37:97:ba:5a:be:a6:
         0f:4f:1d:9e:df:0f:90:18:08:fc:27:1d:c3:67:c9:e4:a7:b6:
         c4:91:69:8e:a8:e2:16:a6:03:d2:71:52:f8:45:1a:a7:ac:4f:
         b4:72:7a:bd:68:e9:94:09:6e:76:e8:d1:04:da:c4:0e:fb:34:
         3a:dc:c4:ba:00:25:29:6a:eb:be:8c:ee:95:ab:ae:65:2e:42:
         7b:53:99:82:bb:af:ea:df:57:26:40:35:c6:82:fe:88:db:47:
         22:cb:1b:3e:2e:8b:41:8f

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06