D-TRUST_CA_2-21-1_2021.crt: 2.5.4.97=NTRDE-HRB74346,CN=D-TRUST CA 2-21-1 2021,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2036-02-17) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_CA_2-21-1_2021.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_CA_2-21-1_2021.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:dd:57:8c:17:f2:58:a7:2d:26:2a:50:04:31:76:ca
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 2 2021
        Validity
            Not Before: Apr 27 08:16:18 2021 GMT
            Not After : Feb 17 09:49:59 2036 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST CA 2-21-1 2021/2.5.4.97=NTRDE-HRB74346
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:fb:eb:99:27:6c:63:4a:0e:de:95:d2:3f:e8:d0:
                    f1:1c:c5:68:11:28:26:57:59:a1:45:15:64:d2:7d:
                    c8:88:4f:b6:63:d6:33:da:d7:96:d4:d4:ab:b3:82:
                    70:24:e5:9f:6e:ad:ee:72:c4:5e:74:52:bb:d9:90:
                    13:2c:fc:bf:43:a0:dc:c0:6e:63:b0:03:b3:39:6f:
                    e2:2c:f5:49:6a:d2:9f:b7:30:ea:51:32:17:82:86:
                    60:48:d2:e3:a9:f7:9e
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:A0:A5:B5:F8:2F:64:45:98:6B:A5:2F:D7:60:E2:EA:5F:31:09:B2:68

            Authority Information Access: 
                OCSP - URI:http://root-ca-2-2021.ocsp.d-trust.net
                CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_2_2021.crt

            X509v3 Certificate Policies: 
                Policy: 0.4.0.194112.1.2
                Policy: 1.3.6.1.4.1.4788.2.150.1
                  CPS: https://www.d-trust.net/internet/files/D-TRUST_TSPS.pdf

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_ca_2_2021.crl

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20CA%202%202021,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

            X509v3 Subject Key Identifier: 
                52:59:D7:7E:D1:85:E4:30:6B:67:8F:24:87:35:E0:8C:AF:5D:FA:41
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: ecdsa-with-SHA384
         30:66:02:31:00:f7:b1:8d:d9:66:4b:6e:5d:90:53:c8:c6:37:
         a9:7f:0f:00:34:1b:32:7e:19:98:8c:6e:bd:13:b5:c2:b0:12:
         c5:d5:21:2c:42:3a:a9:a1:56:08:79:7d:72:0f:b6:37:5a:02:
         31:00:ec:72:c0:46:5d:84:3e:b3:1b:a3:2f:62:f2:e4:4d:05:
         54:0c:c8:52:76:61:bd:d9:e9:7b:23:e4:1b:0e:ee:6d:9b:1b:
         dd:c7:2d:60:95:16:96:71:0c:1d:70:89:95:1e

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06