D-TRUST_Root_Test_CA_2_2017.crt: 2.5.4.97=NTRDE-HRB74346,CN=D-TRUST Root Test CA 2 2017,O=D-Trust GmbH,C=DE (Root Certificate, Expiring 2032-02-01) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_Root_Test_CA_2_2017.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_Root_Test_CA_2_2017.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:cf:ad:c5:da:91:dd:0b:cd:f5:aa:b0:89:79:e7:6c
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Test CA 2 2017/2.5.4.97=NTRDE-HRB74346
        Validity
            Not Before: Feb  1 09:30:00 2017 GMT
            Not After : Feb  1 09:29:59 2032 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Test CA 2 2017/2.5.4.97=NTRDE-HRB74346
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:0f:87:91:af:33:e7:d7:e1:93:59:6f:a7:41:3e:
                    61:be:a4:79:bf:0f:21:5a:b0:a5:cc:4c:f3:e9:dc:
                    4e:bc:49:6e:f6:c2:f1:9a:ee:5d:d3:25:6c:bf:3c:
                    98:70:b2:7e:49:ca:ca:53:c2:69:74:75:54:7f:40:
                    70:bf:47:ab:2d:a5:a2:13:b4:fb:ac:b4:8d:13:08:
                    68:19:ba:cb:95:77:08:0f:aa:bb:db:4a:ee:22:3a:
                    09:43:83:ba:de:26:3e
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                D4:89:47:8A:04:B3:54:44:87:EA:73:45:15:F6:00:D8:06:D9:E6:00
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Test%20CA%202%202017,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_test_ca_2_2017.crl

    Signature Algorithm: ecdsa-with-SHA384
         30:65:02:30:2f:62:e4:23:f6:82:e7:94:63:98:29:ce:db:83:
         ff:ac:63:15:2a:4f:fd:88:a0:61:16:59:65:4e:c3:d8:c7:06:
         8f:0f:84:ec:6a:34:63:6c:7e:70:4b:97:64:6d:df:5b:02:31:
         00:86:97:a6:c7:ac:d0:9e:57:88:9b:d3:a4:7d:9c:e5:fc:4e:
         e6:27:e2:3c:5e:b5:99:77:f9:a0:0a:dc:56:18:6b:b3:37:22:
         af:f7:63:e5:74:63:52:13:3c:1b:48:6e:44

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06