D-TRUST_Root_CA_3_2016.crt: 2.5.4.97=NTRDE-HRB74346,CN=D-TRUST Root CA 3 2016,O=D-Trust GmbH,C=DE (Root Certificate, Expiring 2031-10-26) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_3_2016.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_3_2016.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041525 (0xfe475)
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 3 2016/2.5.4.97=NTRDE-HRB74346
        Validity
            Not Before: Oct 26 07:36:50 2016 GMT
            Not After : Oct 26 08:36:50 2031 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 3 2016/2.5.4.97=NTRDE-HRB74346
        Subject Public Key Info:
            Public Key Algorithm: rsassaPss
                RSA-PSS Public-Key: (4096 bit)
                Modulus:
                    00:bd:79:43:27:96:3f:c9:46:1e:59:48:da:bf:09:
                    60:65:f5:ba:5d:51:ed:e0:70:f9:6b:44:3a:e3:07:
                    35:fb:b2:25:10:98:3c:5c:dd:9b:e0:97:ac:2c:89:
                    b1:32:3a:0e:b2:b5:90:43:ad:31:89:56:8f:e0:f7:
                    14:8e:a2:70:72:94:8a:3a:ff:a9:86:35:71:89:3d:
                    76:6d:83:1c:fc:90:2c:78:d1:e8:fa:07:a9:46:7a:
                    f3:77:58:f1:99:8a:cc:3e:43:d1:19:22:d4:31:f4:
                    63:87:1e:ff:81:2c:51:d2:dc:78:0c:4f:d2:cb:cd:
                    87:e6:db:96:af:88:59:28:1f:65:fb:56:ea:e3:28:
                    ba:f8:05:0a:71:b0:e7:3a:09:b7:17:f2:95:51:f8:
                    72:17:34:f0:f7:91:af:75:3d:3d:63:17:d7:09:fe:
                    5e:90:e7:84:91:d4:87:1d:38:ed:25:cb:23:2b:f1:
                    89:4b:b8:39:a4:14:35:b8:46:af:42:d2:0d:97:3e:
                    b9:2d:ab:b1:e9:81:c4:84:86:dd:58:8b:2c:9f:d7:
                    9a:4d:92:bd:71:79:fb:d4:db:40:47:08:f4:b8:09:
                    ae:b1:50:d2:c6:0a:9f:b5:e2:e7:ae:5a:fb:5e:8f:
                    ad:f0:02:e1:02:0a:2f:de:ca:e9:2c:ff:32:43:c3:
                    5b:73:07:d6:da:0e:4c:2e:72:c6:cc:75:61:d8:35:
                    0e:f6:de:0a:78:61:ba:8d:d8:24:2b:00:bc:2e:4b:
                    20:7c:0e:17:5a:26:6e:f5:ae:be:cf:d3:17:96:c2:
                    5f:11:39:f6:e6:e7:95:76:15:3f:a3:b3:01:3b:a8:
                    e7:24:58:85:40:4f:79:ef:80:18:aa:08:a7:48:9a:
                    5f:cb:82:98:2c:00:81:71:30:80:5d:f1:f7:75:f0:
                    ce:8d:1f:0f:29:bc:02:1f:4f:d3:98:fa:9a:ab:da:
                    51:ff:90:5e:03:1a:02:f4:86:95:16:d0:b5:e0:7c:
                    a3:1a:dc:6b:b5:2f:79:f9:b0:f9:69:6c:fe:21:a5:
                    c4:78:ae:ed:a9:b9:6f:20:06:1f:fb:3f:2a:76:32:
                    ee:68:f9:83:43:6c:ff:de:4e:15:06:28:70:27:33:
                    96:06:26:28:02:d9:53:6e:0a:6e:59:ee:67:4f:e3:
                    21:fb:a8:3a:73:84:0d:df:af:6c:1f:c4:08:83:d3:
                    c0:dc:88:3e:f7:64:01:1b:5a:4e:d9:81:27:3d:7c:
                    d2:58:83:8b:4f:2a:4a:a2:15:ce:04:ed:19:08:72:
                    4c:59:db:40:77:1c:68:30:0f:2b:d6:64:75:6a:c3:
                    97:95:33:1e:a0:a5:d7:9c:8d:0a:34:77:df:02:e6:
                    a2:c0:17
                Exponent: 65537 (0x10001)
                No PSS parameter restrictions
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                DC:C0:12:BD:88:3D:63:13:8C:34:AB:DB:CE:8B:32:C4:11:4E:5D:E7
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20CA%203%202016,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_ca_3_2016.crl

    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)

         85:ab:5e:51:d3:b4:dc:38:0f:16:6b:a5:a8:2a:50:ce:0f:59:
         2c:04:d4:5d:42:66:1c:8b:51:e1:a4:0d:01:c1:81:4e:1b:74:
         e8:fc:d8:bc:c8:c1:95:5f:cd:0d:7c:c3:e2:ca:e2:ea:04:13:
         32:dc:15:6c:e0:51:08:2b:87:1e:84:46:cb:7b:fe:68:3a:22:
         8f:69:b9:82:44:b2:b7:9b:10:13:ba:4d:90:45:50:34:10:9e:
         37:f3:fd:2b:1c:cf:a9:d2:e3:c5:80:25:73:28:41:38:c4:42:
         11:4c:ae:02:8c:68:24:ba:af:3a:61:ca:f1:6e:c3:53:29:69:
         97:81:1a:ee:c6:b4:ed:88:87:59:26:d3:c6:56:c1:2d:ef:57:
         e9:a8:fa:29:25:9b:6c:e4:be:04:9f:35:1b:53:14:37:33:8c:
         a7:4a:e1:8a:b2:9d:c2:6b:5a:14:f6:bd:e9:46:ba:9a:dc:ae:
         0f:20:fc:55:04:14:74:64:66:bb:b8:5c:b4:af:6b:95:5e:71:
         59:05:4e:d2:ed:c7:2b:7f:23:0e:af:3b:b2:d9:93:63:a7:03:
         76:9c:4f:a0:b8:15:94:e9:3c:61:30:eb:55:d4:85:35:91:00:
         20:c4:ad:a3:be:8d:5b:30:73:55:f2:00:31:dd:02:e0:b5:0e:
         cd:b0:94:28:3a:b2:d6:73:f8:76:7c:73:31:42:69:d4:0f:8d:
         3f:5b:e8:7f:ff:a8:6f:a6:16:fc:65:4d:33:4b:1b:4b:a3:18:
         8b:e0:c0:8e:25:88:2c:36:e3:60:fd:7a:67:04:1c:9d:74:4b:
         07:e1:7f:fa:ff:c5:f3:d9:77:32:48:3c:3d:c6:a9:e3:b9:19:
         5e:99:e5:35:46:0f:b7:02:ff:17:e6:3f:37:a9:46:24:37:ca:
         ac:e9:e2:d3:59:68:0a:6b:11:5c:a0:55:ea:10:46:95:4c:f8:
         6d:6b:dd:fb:45:f3:15:af:3f:5d:9b:f6:4e:16:e3:29:62:1e:
         71:ef:34:2c:cb:5b:2b:b9:bd:d2:49:11:85:0d:0e:cb:8e:d5:
         e0:24:ca:05:6e:4d:48:46:34:20:bf:84:1f:05:57:e4:5e:3e:
         71:bf:c1:7f:30:fd:be:53:63:43:bc:24:fc:4b:62:53:5f:9c:
         e5:22:42:97:21:64:fb:e7:06:cc:d8:42:75:7f:3d:88:8c:30:
         1b:9e:43:37:93:a7:43:ba:14:1b:7e:78:a7:9c:27:1a:dc:cf:
         62:6d:81:5e:63:21:ab:4d:70:8a:c2:0e:ae:3b:30:69:49:25:
         79:4a:d4:86:59:6f:21:46:05:e0:8b:36:58:9f:b4:75:08:6f:
         71:95:7d:a2:05:f0:60:32

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06