D-TRUST_TSU_13_2017.crt: 2.5.4.97=NTRDE-HRB74346,CN=D-TRUST TSU 13 2017,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2024-09-25) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/internet/files/D-TRUST_TSU_13_2017.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/internet/files/D-TRUST_TSU_13_2017.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2680313 (0x28e5f9)
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST CA 1-3 2017/2.5.4.97=NTRDE-HRB74346
        Validity
            Not Before: Sep 25 10:32:38 2019 GMT
            Not After : Sep 25 10:32:38 2024 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST TSU 13 2017/2.5.4.97=NTRDE-HRB74346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:bb:2f:45:b3:be:00:fc:57:8f:ff:13:03:
                    d7:10:3a:8e:c5:65:99:74:79:ae:7e:97:4c:61:67:
                    d0:77:97:49:8a:30:53:36:10:43:72:6d:3f:4f:87:
                    ae:9d:0f:7d:08:5f:b9:fd:7d:c0:cd:f3:0c:8b:d1:
                    aa:9b:4b:1e:a3:ca:b6:27:5c:81:4c:43:de:69:21:
                    9f:24:92:27:44:29:41:81:d9:16:ea:af:11:43:1f:
                    f0:9e:3f:8b:0e:d2:be:f9:82:9d:98:65:f2:0c:31:
                    5f:89:1d:c4:53:cc:6c:5d:b3:f3:29:74:e7:99:e7:
                    2e:87:94:b5:44:39:e3:56:fd:8a:a4:f3:70:69:bb:
                    e4:4a:ce:c1:1d:ca:4e:64:c1:19:b8:3e:a7:f8:a1:
                    59:aa:c9:be:10:46:5f:13:19:d0:9d:85:02:86:3c:
                    ed:50:78:f4:54:b1:b4:16:54:10:38:55:ee:08:33:
                    34:74:96:80:01:c8:90:a9:f4:62:a7:31:0c:07:8f:
                    5e:e3:b8:48:ae:f6:7c:c5:ad:d0:7a:4e:39:9d:dd:
                    30:6c:94:77:71:7f:05:c5:7a:03:fb:80:0c:96:71:
                    76:ca:1d:0f:ce:31:0b:35:9c:b1:55:38:29:fc:dc:
                    ee:43:9e:17:85:e7:72:0d:2d:96:61:70:3a:a6:0b:
                    be:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Authority Key Identifier: 
                keyid:CD:FD:A8:1B:25:94:56:46:4C:2F:AC:C9:5A:46:0F:B8:27:92:28:5E

            Authority Information Access: 
                OCSP - URI:http://dtr-ca-1-3-2017.ocsp.d-trust.net
                CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_CA_1-3_2017.crt
                CA Issuers - URI:ldap://directory.d-trust.net/CN=D-TRUST%20CA%201-3%202017,O=D-Trust%20GmbH,C=DE?cACertificate?base?

            X509v3 Certificate Policies: 
                Policy: 0.4.0.2023.1.1
                Policy: 1.3.6.1.4.1.4788.2.100.3
                  CPS: http://www.d-trust.net/internet/files/D-TRUST_Cloud_PKI_CPS.pdf

            X509v3 Private Key Usage Period: 
                Not After: Sep 25 00:00:00 2022 GMT
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20CA%201-3%202017,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
                  URI:http://crl.d-trust.net/crl/d-trust_ca_1-3_2017.crl
                  URI:http://cdn.d-trust-cloudcrl.net/crl/d-trust_ca_1-3_2017.crl

            X509v3 Subject Key Identifier: 
                07:C3:17:BD:A6:7C:93:4D:92:E3:5D:7E:BE:8B:87:E4:63:24:56:48
            X509v3 Key Usage: critical
                Non Repudiation
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)

         4d:74:c4:89:91:f0:a8:2f:ab:a2:06:11:0f:70:09:0b:36:e7:
         44:de:04:6f:fe:9e:df:a0:38:d4:f2:76:09:0c:e5:f0:9f:09:
         82:04:9c:eb:9f:29:e2:80:87:b6:65:dc:e2:ec:8c:2b:2a:9d:
         9d:7e:c3:17:b8:39:d5:e6:cd:d0:c1:a0:d8:39:be:84:ea:fb:
         d6:93:92:bf:fc:45:77:c5:22:34:59:2e:43:40:8e:2d:99:8f:
         eb:f2:50:52:ea:c3:6b:be:e4:ee:b0:a5:b3:74:a5:80:2e:13:
         3e:e3:2f:8b:3b:9d:2e:15:da:d7:d2:62:7b:bc:ef:40:22:fe:
         8a:ec:c0:3e:1b:04:02:8d:d5:66:23:ba:78:4f:ef:f2:07:77:
         18:65:e9:8a:01:f3:dc:9a:99:6e:13:0d:14:21:05:68:d3:16:
         70:60:ef:a1:7e:65:0d:32:e6:4d:0b:8b:f4:ff:51:e1:d1:8f:
         46:33:a8:3a:5c:b6:23:63:aa:e9:c6:07:49:8a:70:6c:73:e8:
         36:55:0f:9c:30:68:34:80:49:0a:9c:06:20:bb:4e:1d:99:21:
         02:0f:14:fc:a2:b8:01:57:3e:3a:e3:6f:0c:1a:2d:49:77:35:
         8f:b6:be:84:24:b5:49:7d:64:07:25:42:cf:88:72:b6:ee:80:
         56:a6:0b:13:d3:9e:46:ba:c0:a5:1f:56:35:d7:04:60:a3:5d:
         a4:e9:ff:a2:7f:1d:65:54:7a:16:af:f7:cf:7c:a4:5b:5d:f2:
         fc:57:2b:56:e6:68:9b:7c:34:32:22:97:68:37:7a:30:96:e1:
         56:b8:58:d4:1f:40:e1:c1:5f:5c:39:5c:a6:a9:79:7b:b1:2b:
         ad:fb:ae:e5:83:96:e8:f8:0a:15:e4:c7:14:17:13:dc:5d:4b:
         d2:48:cd:14:96:fc:88:ff:0c:e8:c2:17:7f:76:0b:7e:d9:00:
         a5:c1:76:12:bf:c6:19:88:30:d5:5f:c5:42:8b:78:b4:f3:b4:
         77:8b:8a:ce:02:1f:5e:91:88:5d:56:61:11:df:be:64:8c:48:
         4b:6e:82:ea:60:ca:33:03:3c:2f:98:2c:b9:4f:68:e5:31:9b:
         12:d2:ab:2f:5b:b1:14:3f:39:8b:a9:9f:92:4a:c4:44:6f:a9:
         78:be:4c:6f:ae:12:30:f4:e2:72:d8:6d:dd:a9:29:9a:8c:31:
         b3:92:2c:b2:f0:d4:da:1e:b4:dc:9f:82:1e:80:b0:94:99:3c:
         d4:04:04:88:02:24:e4:90:6b:73:a4:4b:57:23:c0:37:fd:f8:
         36:9e:dc:1a:cb:11:dd:fd:ee:73:18:32:45:00:4e:84:3a:c2:
         c4:7d:36:f6:15:da:c0:26

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIHfzCCBTegAwIBAgIDKOX5MD0GCSqGSIb3DQEBCjAwoA0wCwYJYIZIAWUDBAID
oRowGAYJKoZIhvcNAQEIMAsGCWCGSAFlAwQCA6IDAgFAMFsxCzAJBgNVBAYTAkRF
MRUwEwYDVQQKEwxELVRydXN0IEdtYkgxHDAaBgNVBAMTE0QtVFJVU1QgQ0EgMS0z
IDIwMTcxFzAVBgNVBGETDk5UUkRFLUhSQjc0MzQ2MB4XDTE5MDkyNTEwMzIzOFoX
DTI0MDkyNTEwMzIzOFowWzELMAkGA1UEBhMCREUxFTATBgNVBAoTDEQtVHJ1c3Qg
R21iSDEcMBoGA1UEAxMTRC1UUlVTVCBUU1UgMTMgMjAxNzEXMBUGA1UEYRMOTlRS
REUtSFJCNzQzNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSc7sv
RbO+APxXj/8TA9cQOo7FZZl0ea5+l0xhZ9B3l0mKMFM2EENybT9Ph66dD30IX7n9
fcDN8wyL0aqbSx6jyrYnXIFMQ95pIZ8kkidEKUGB2RbqrxFDH/CeP4sO0r75gp2Y
ZfIMMV+JHcRTzGxds/MpdOeZ5y6HlLVEOeNW/Yqk83Bpu+RKzsEdyk5kwRm4Pqf4
oVmqyb4QRl8TGdCdhQKGPO1QePRUsbQWVBA4Ve4IMzR0loAByJCp9GKnMQwHj17j
uEiu9nzFrdB6Tjmd3TBslHdxfwXFegP7gAyWcXbKHQ/OMQs1nLFVOCn83O5DnheF
53INLZZhcDqmC77rAgMBAAGjggLqMIIC5jAWBgNVHSUBAf8EDDAKBggrBgEFBQcD
CDAfBgNVHSMEGDAWgBTN/agbJZRWRkwvrMlaRg+4J5IoXjCB+gYIKwYBBQUHAQEE
ge0wgeowMwYIKwYBBQUHMAGGJ2h0dHA6Ly9kdHItY2EtMS0zLTIwMTcub2NzcC5k
LXRydXN0Lm5ldDBCBggrBgEFBQcwAoY2aHR0cDovL3d3dy5kLXRydXN0Lm5ldC9j
Z2ktYmluL0QtVFJVU1RfQ0FfMS0zXzIwMTcuY3J0MG8GCCsGAQUFBzAChmNsZGFw
Oi8vZGlyZWN0b3J5LmQtdHJ1c3QubmV0L0NOPUQtVFJVU1QlMjBDQSUyMDEtMyUy
MDIwMTcsTz1ELVRydXN0JTIwR21iSCxDPURFP2NBQ2VydGlmaWNhdGU/YmFzZT8w
cAYDVR0gBGkwZzAIBgYEAI9nAQEwWwYKKwYBBAGlNAJkAzBNMEsGCCsGAQUFBwIB
Fj9odHRwOi8vd3d3LmQtdHJ1c3QubmV0L2ludGVybmV0L2ZpbGVzL0QtVFJVU1Rf
Q2xvdWRfUEtJX0NQUy5wZGYwGgYDVR0QBBMwEYEPMjAyMjA5MjUwMDAwMDBaMIHw
BgNVHR8EgegwgeUwgeKggd+ggdyGaWxkYXA6Ly9kaXJlY3RvcnkuZC10cnVzdC5u
ZXQvQ049RC1UUlVTVCUyMENBJTIwMS0zJTIwMjAxNyxPPUQtVHJ1c3QlMjBHbWJI
LEM9REU/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlzdIYyaHR0cDovL2NybC5kLXRy
dXN0Lm5ldC9jcmwvZC10cnVzdF9jYV8xLTNfMjAxNy5jcmyGO2h0dHA6Ly9jZG4u
ZC10cnVzdC1jbG91ZGNybC5uZXQvY3JsL2QtdHJ1c3RfY2FfMS0zXzIwMTcuY3Js
MB0GA1UdDgQWBBQHwxe9pnyTTZLjXX6+i4fkYyRWSDAOBgNVHQ8BAf8EBAMCBkAw
PQYJKoZIhvcNAQEKMDCgDTALBglghkgBZQMEAgOhGjAYBgkqhkiG9w0BAQgwCwYJ
YIZIAWUDBAIDogMCAUADggIBAE10xImR8Kgvq6IGEQ9wCQs250TeBG/+nt+gONTy
dgkM5fCfCYIEnOufKeKAh7Zl3OLsjCsqnZ1+wxe4OdXmzdDBoNg5voTq+9aTkr/8
RXfFIjRZLkNAji2Zj+vyUFLqw2u+5O6wpbN0pYAuEz7jL4s7nS4V2tfSYnu870Ai
/orswD4bBAKN1WYjunhP7/IHdxhl6YoB89yamW4TDRQhBWjTFnBg76F+ZQ0y5k0L
i/T/UeHRj0YzqDpctiNjqunGB0mKcGxz6DZVD5wwaDSASQqcBiC7Th2ZIQIPFPyi
uAFXPjrjbwwaLUl3NY+2voQktUl9ZAclQs+IcrbugFamCxPTnka6wKUfVjXXBGCj
XaTp/6J/HWVUehav9898pFtd8vxXK1bmaJt8NDIil2g3ejCW4Va4WNQfQOHBX1w5
XKapeXuxK637ruWDluj4ChXkxxQXE9xdS9JIzRSW/Ij/DOjCF392C37ZAKXBdhK/
xhmIMNVfxUKLeLTztHeLis4CH16RiF1WYRHfvmSMSEtugupgyjMDPC+YLLlPaOUx
mxLSqy9bsRQ/OYupn5JKxERvqXi+TG+uEjD04nLYbd2pKZqMMbOSLLLw1NoetNyf
gh6AsJSZPNQEBIgCJOSQa3OkS1cjwDf9+Dae3BrLEd397nMYMkUAToQ6wsR9NvYV
2sAm
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06