D-TRUST_Root_CA_3_2021.crt: CN=D-TRUST Root CA 3 2021,O=D-Trust GmbH,C=DE (Root Certificate, Expiring 2036-02-17) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_3_2021.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_3_2021.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c2:2a:54:79:d8:ea:68:a9:c5:a2:7a:90:9b:a9:38
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 3 2021
        Validity
            Not Before: Feb 17 10:15:00 2021 GMT
            Not After : Feb 17 10:14:59 2036 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 3 2021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:bf:0b:9c:8f:b8:63:e9:5a:fa:76:69:42:ad:5b:
                    6b:2b:ae:bf:75:07:e9:f5:e5:9a:6d:e2:e1:72:6d:
                    b3:91:b0:fe:97:52:87:ac:41:bc:a8:61:87:14:d2:
                    0e:ad:35:30:c4:58:38:87:71:43:6e:2f:20:da:c9:
                    8e:3f:d4:98:96:dc:d7:b0:e7:58:5e:0f:5c:56:1f:
                    af:52:6b:49:76:12:6e:35:91:f1:a7:62:bb:49:ab:
                    7c:a3:60:e3:97:40:89:68:f3:50:3c:19:36:9f:d9:
                    fe:e2:2b:fe:12:e9:ff:6f:97:06:aa:42:5b:f1:67:
                    6f:ef:64:1a:05:d2:db:3e:7e:fe:09:cb:7e:34:90:
                    c0:c8:f3:3c:7b:d7:db:fa:65:81:be:78:79:99:c2:
                    9b:8a:50:4f:97:aa:90:83:cd:36:2d:ba:26:5f:5a:
                    3b:9c:ae:72:cd:bc:2e:e6:6c:c3:7e:4d:87:7b:51:
                    ab:14:7f:c9:2e:90:4a:61:9c:63:61:8a:0b:43:80:
                    5a:16:ed:71:51:cb:4d:df:19:82:81:fc:96:1a:22:
                    8d:62:fa:ad:26:19:3b:76:5b:25:7e:c0:6b:14:60:
                    43:4f:fe:3f:89:60:a7:06:13:e0:71:5d:85:09:5a:
                    19:84:f1:95:38:b0:04:e6:37:be:03:9b:6e:02:a5:
                    0b:e5:df:e2:50:92:59:b4:49:2e:d2:0f:39:46:b1:
                    06:d1:d8:fa:49:ad:27:43:31:f3:6e:5f:83:64:c9:
                    a2:bc:de:00:fb:18:1c:fb:c8:cf:75:68:85:9f:04:
                    16:14:15:67:66:e4:26:4b:92:9c:00:53:44:e7:53:
                    3b:13:4a:29:5c:ac:aa:c7:22:e4:50:7e:85:68:81:
                    01:fe:6e:41:01:29:ec:5d:bf:ca:5c:3c:1a:55:a7:
                    ea:e0:fe:59:ff:eb:8e:d9:db:1f:de:c9:5d:67:68:
                    c0:bd:6b:22:c6:e4:69:6e:6f:85:d4:98:37:d3:b3:
                    90:24:bc:f4:fa:94:8c:a7:af:e7:1d:d6:71:c3:62:
                    2a:ec:66:f5:69:7b:57:a1:bc:70:3e:ef:3e:2c:80:
                    a8:d7:b7:79:e8:c0:78:98:01:8d:84:63:24:d0:cc:
                    1a:14:a0:47:d7:b1:e5:0b:fb:e3:d0:d4:36:97:f2:
                    77:dd:e0:60:67:c8:73:d0:6e:ac:66:74:7f:d8:88:
                    59:b6:49:9f:1b:f8:40:e5:ce:f7:c1:ca:20:b5:46:
                    4a:99:92:98:46:97:40:61:1d:a1:31:2b:8e:bb:5b:
                    8e:45:73:8d:0a:b6:1e:56:a8:a8:47:ab:e2:77:11:
                    a4:ec:4d:86:66:54:fe:f2:b6:db:ab:70:52:7c:7f:
                    9f:a9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                B1:A7:5F:73:08:2D:F8:0B:6E:2D:51:34:79:0A:C6:1F:E1:90:46:50
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_ca_3_2021.crl

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20CA%203%202021,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)

         0b:c6:d6:52:fb:93:ee:6e:ca:16:cc:c7:a5:6d:a0:a8:c1:b9:
         d9:4a:85:93:ba:e8:71:3d:4b:e5:ce:e9:87:28:01:5f:52:24:
         8c:ff:a5:21:fe:e8:f6:e3:11:c6:b5:1c:af:5a:d3:63:98:bc:
         78:10:d5:3a:71:ed:d1:05:7a:80:0b:0f:ef:7f:45:fa:0a:33:
         28:c5:1f:7e:63:04:f8:99:c4:91:c9:2a:1d:fb:da:d8:db:94:
         58:4a:89:b3:58:2d:45:99:88:b3:5a:8b:d4:be:c4:f0:18:7b:
         51:2d:ec:e8:7c:fa:7c:58:44:39:66:10:19:7a:b6:64:51:c6:
         b7:bb:67:2e:dd:04:38:9d:ce:76:82:88:5e:c6:4e:52:5b:f5:
         2a:2f:c0:f2:0d:80:57:6d:6f:fb:ba:90:c0:c0:b6:d5:22:0c:
         2a:f9:f3:04:9b:26:b8:bd:b7:5a:fe:6d:27:ad:37:df:69:2b:
         76:25:85:41:75:df:1f:9c:51:08:c2:0f:da:0a:c7:2d:c2:76:
         a5:07:01:29:bf:5e:8c:74:46:36:75:2b:e5:99:93:c1:64:68:
         e9:d6:6f:c4:d6:2a:f4:ad:aa:6b:27:9d:23:3d:f2:50:9a:a1:
         0f:38:d0:35:6c:b4:0c:86:4e:b5:3d:83:85:76:9c:1f:bb:0d:
         bb:f4:a2:be:11:f5:06:30:a5:77:41:ba:8f:6b:73:e7:16:8e:
         f0:22:b9:49:25:23:23:d4:fb:09:bc:4a:c5:a8:1f:06:00:17:
         0f:e8:4e:76:9c:1a:d3:00:90:ae:b5:3a:18:1b:34:a5:cf:57:
         b8:00:b8:63:33:1b:5e:6d:24:12:ea:62:da:d8:e5:e8:d8:0f:
         df:00:72:4e:5b:94:5b:69:05:f0:cc:6e:58:85:30:f3:38:a0:
         66:d3:a8:dc:cf:1e:9b:36:3f:05:ca:34:e3:87:ab:ce:81:99:
         63:29:05:38:80:81:17:a3:d6:8d:de:04:84:71:8b:e2:07:e0:
         e0:66:52:39:32:0d:15:5e:f1:46:36:67:b3:4e:9e:98:f8:f3:
         1a:ee:60:b9:5f:4b:51:c6:a1:6a:ec:fc:05:f9:17:91:4a:d1:
         09:60:fa:e6:09:66:cf:f4:93:6f:5e:6f:d9:a5:39:83:9a:82:
         a6:41:d2:b4:2d:29:f5:8c:16:13:d5:58:f8:4a:07:a0:b9:8d:
         68:80:46:60:3a:f1:34:9d:90:a5:82:2e:bf:9f:46:7e:23:0c:
         52:a3:a9:e5:6a:cd:e3:f1:0e:ea:a5:44:f1:f2:6d:27:f4:d6:
         2a:30:ba:3e:62:85:7b:56:f5:23:15:ec:1d:3c:2f:33:08:ea:
         62:3a:9e:e2:d0:60:06:24

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIGezCCBDOgAwIBAgIQa8IqVHnY6mipxaJ6kJupODA9BgkqhkiG9w0BAQowMKAN
MAsGCWCGSAFlAwQCA6EaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgOiAwIBQDBF
MQswCQYDVQQGEwJERTEVMBMGA1UEChMMRC1UcnVzdCBHbWJIMR8wHQYDVQQDExZE
LVRSVVNUIFJvb3QgQ0EgMyAyMDIxMB4XDTIxMDIxNzEwMTUwMFoXDTM2MDIxNzEw
MTQ1OVowRTELMAkGA1UEBhMCREUxFTATBgNVBAoTDEQtVHJ1c3QgR21iSDEfMB0G
A1UEAxMWRC1UUlVTVCBSb290IENBIDMgMjAyMTCCAiIwDQYJKoZIhvcNAQEBBQAD
ggIPADCCAgoCggIBAL8LnI+4Y+la+nZpQq1bayuuv3UH6fXlmm3i4XJts5Gw/pdS
h6xBvKhhhxTSDq01MMRYOIdxQ24vINrJjj/UmJbc17DnWF4PXFYfr1JrSXYSbjWR
8adiu0mrfKNg45dAiWjzUDwZNp/Z/uIr/hLp/2+XBqpCW/Fnb+9kGgXS2z5+/gnL
fjSQwMjzPHvX2/plgb54eZnCm4pQT5eqkIPNNi26Jl9aO5yucs28LuZsw35Nh3tR
qxR/yS6QSmGcY2GKC0OAWhbtcVHLTd8ZgoH8lhoijWL6rSYZO3ZbJX7AaxRgQ0/+
P4lgpwYT4HFdhQlaGYTxlTiwBOY3vgObbgKlC+Xf4lCSWbRJLtIPOUaxBtHY+kmt
J0Mx825fg2TJorzeAPsYHPvIz3VohZ8EFhQVZ2bkJkuSnABTROdTOxNKKVysqsci
5FB+hWiBAf5uQQEp7F2/ylw8GlWn6uD+Wf/rjtnbH97JXWdowL1rIsbkaW5vhdSY
N9OzkCS89PqUjKev5x3WccNiKuxm9Wl7V6G8cD7vPiyAqNe3eejAeJgBjYRjJNDM
GhSgR9ex5Qv749DUNpfyd93gYGfIc9BurGZ0f9iIWbZJnxv4QOXO98HKILVGSpmS
mEaXQGEdoTErjrtbjkVzjQq2HlaoqEer4ncRpOxNhmZU/vK226twUnx/n6klAgMB
AAGjggEFMIIBATAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSxp19zCC34C24t
UTR5CsYf4ZBGUDAOBgNVHQ8BAf8EBAMCAQYwgb4GA1UdHwSBtjCBszA7oDmgN4Y1
aHR0cDovL2NybC5kLXRydXN0Lm5ldC9jcmwvZC10cnVzdF9yb290X2NhXzNfMjAy
MS5jcmwwdKByoHCGbmxkYXA6Ly9kaXJlY3RvcnkuZC10cnVzdC5uZXQvQ049RC1U
UlVTVCUyMFJvb3QlMjBDQSUyMDMlMjAyMDIxLE89RC1UcnVzdCUyMEdtYkgsQz1E
RT9jZXJ0aWZpY2F0ZXJldm9jYXRpb25saXN0MD0GCSqGSIb3DQEBCjAwoA0wCwYJ
YIZIAWUDBAIDoRowGAYJKoZIhvcNAQEIMAsGCWCGSAFlAwQCA6IDAgFAA4ICAQAL
xtZS+5PubsoWzMelbaCowbnZSoWTuuhxPUvlzumHKAFfUiSM/6Uh/uj24xHGtRyv
WtNjmLx4ENU6ce3RBXqACw/vf0X6CjMoxR9+YwT4mcSRySod+9rY25RYSomzWC1F
mYizWovUvsTwGHtRLezofPp8WEQ5ZhAZerZkUca3u2cu3QQ4nc52gohexk5SW/Uq
L8DyDYBXbW/7upDAwLbVIgwq+fMEmya4vbda/m0nrTffaSt2JYVBdd8fnFEIwg/a
CsctwnalBwEpv16MdEY2dSvlmZPBZGjp1m/E1ir0raprJ50jPfJQmqEPONA1bLQM
hk61PYOFdpwfuw279KK+EfUGMKV3QbqPa3PnFo7wIrlJJSMj1PsJvErFqB8GABcP
6E52nBrTAJCutToYGzSlz1e4ALhjMxtebSQS6mLa2OXo2A/fAHJOW5RbaQXwzG5Y
hTDzOKBm06jczx6bNj8FyjTjh6vOgZljKQU4gIEXo9aN3gSEcYviB+DgZlI5Mg0V
XvFGNmezTp6Y+PMa7mC5X0tRxqFq7PwF+ReRStEJYPrmCWbP9JNvXm/ZpTmDmoKm
QdK0LSn1jBYT1Vj4SgeguY1ogEZgOvE0nZClgi6/n0Z+IwxSo6nlas3j8Q7qpUTx
8m0n9NYqMLo+YoV7VvUjFewdPC8zCOpiOp7i0GAGJA==
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06