D-TRUST_SSL_Class_3_CA_1_EV_2009.crt: CN=D-TRUST SSL Class 3 CA 1 EV 2009,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2029-11-05) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_EV_2009.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_EV_2009.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626788 (0x99064)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 EV 2009
        Validity
            Not Before: Nov 12 12:52:43 2009 GMT
            Not After : Nov  5 08:50:46 2029 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST SSL Class 3 CA 1 EV 2009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:7e:67:38:9a:90:5c:8f:ab:cd:1f:93:54:
                    08:4f:d5:02:70:fc:b4:47:75:08:ca:ae:7a:85:70:
                    3a:96:18:1f:b3:59:7d:47:dc:11:33:df:c3:21:55:
                    f6:a2:56:f4:80:70:97:76:99:c7:46:6f:a3:c3:37:
                    8b:dd:d1:c9:3b:c2:26:e4:e9:bf:73:6e:19:7d:25:
                    44:cc:17:20:2b:14:b9:5f:b5:f9:7b:ba:02:61:bf:
                    6d:a3:37:7d:c6:cd:38:5a:a6:1d:e6:45:ab:bc:22:
                    6c:49:07:f9:82:db:f9:80:07:89:b7:e4:22:53:b7:
                    6d:5e:cd:c0:60:37:e5:5a:fe:20:f5:e1:1a:0c:4c:
                    71:33:45:50:99:c7:84:02:8e:6a:73:b2:3b:76:4e:
                    6b:cb:7e:7a:1b:5e:33:42:6a:f6:f5:cc:62:7b:a6:
                    12:d2:41:fe:ee:a9:f9:83:e7:36:d4:cd:35:b0:43:
                    65:7b:4b:41:3f:12:1f:92:ff:a7:57:de:48:87:72:
                    64:a4:74:8f:9b:fc:20:14:a7:c2:b7:04:6d:1b:ee:
                    55:7a:15:28:30:4a:60:7e:2d:17:7e:65:64:6a:0e:
                    79:f1:a4:29:69:a7:90:0a:d6:19:9d:7b:aa:ea:0d:
                    43:d4:b0:1c:8c:8a:8c:a4:e3:f8:c0:d4:69:d6:57:
                    4b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:D3:94:8A:4C:62:13:2A:19:2E:CC:AF:72:8A:7D:36:D7:9A:1C:DC:67

            Authority Information Access: 
                OCSP - URI:http://root-c3-ca2-ev-2009.ocsp.d-trust.net

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: http://www.d-trust.net/internet/files/D-TRUST_Root_PKI_CPS.pdf

            X509v3 Subject Alternative Name: 
                email:info@d-trust.net, URI:http://www.d-trust.net
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%20EV%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

                Full Name:
                  URI:http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_ev_2009.crl

            X509v3 Subject Key Identifier: 
                AC:ED:A5:9D:7A:A2:B6:43:F1:18:8A:25:6A:6C:B1:CC:A8:F2:5A:D4
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: sha256WithRSAEncryption
         3a:23:7b:06:ca:f6:f8:31:d4:f2:11:91:41:05:60:4d:ff:92:
         b1:d5:25:64:90:fb:25:97:c0:ef:82:8b:09:8a:eb:8a:e0:8e:
         e6:0f:a1:45:28:38:ca:82:88:2b:e3:4e:c4:a0:34:92:da:dd:
         7e:a5:29:90:09:bd:2b:35:7a:09:4f:76:08:96:96:46:a8:f6:
         14:da:b7:30:ad:e9:5a:6c:94:19:58:07:e8:46:76:e4:0f:1d:
         9a:aa:87:e1:a7:9b:b8:e5:dc:90:a4:cd:ad:47:dd:ff:a0:0d:
         fa:8a:e1:d8:73:d1:30:ab:c0:9a:2c:6a:25:ae:94:f5:df:c4:
         43:ee:2e:27:37:bb:19:16:e1:47:d0:8b:1e:37:3d:3e:11:99:
         bc:f0:d1:e2:f5:67:89:53:2b:21:58:52:81:28:04:62:fb:9f:
         3d:63:83:ff:1b:65:e7:6d:c9:31:14:a5:31:6b:bb:84:ae:86:
         5c:33:0b:ca:07:2e:3a:f4:ad:00:bb:4c:d5:4f:1b:35:cc:db:
         5f:3a:5d:d0:90:d8:0f:c3:33:8f:78:78:4e:9e:9c:dc:7a:7c:
         8f:80:d1:26:f8:74:34:14:f4:e7:07:81:de:28:1a:93:78:ba:
         64:33:b8:78:82:ae:4c:67:64:cf:99:fb:97:28:3c:f7:00:7a:
         d6:2c:b7:47

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06