D-TRUST_SSL_Class_3_CA_1_2009.crt: CN=D-TRUST SSL Class 3 CA 1 2009,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2029-11-05) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626787 (0x99063)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009
        Validity
            Not Before: Nov 12 12:46:55 2009 GMT
            Not After : Nov  5 08:35:58 2029 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST SSL Class 3 CA 1 2009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:74:4b:22:d2:8a:31:34:26:4b:a1:1c:99:
                    8e:09:b9:90:ce:7c:b1:b9:26:3b:0d:a1:30:85:4b:
                    1d:52:92:3e:da:59:64:0c:bc:fa:b3:d0:56:41:ed:
                    73:09:55:c3:86:bb:77:ab:3e:54:e4:7e:21:ea:3c:
                    66:e4:47:3e:65:b1:62:53:71:af:db:2c:69:23:97:
                    11:3e:ba:a3:f6:62:54:d4:21:a0:cb:5f:b6:f6:48:
                    6e:52:7a:28:a7:34:aa:eb:a1:cf:b8:66:46:87:4e:
                    88:ed:b2:64:5d:34:3b:01:0f:76:cf:53:1d:2f:6c:
                    00:4e:3d:54:59:d3:62:77:7b:10:36:25:88:9b:ee:
                    bd:9d:44:47:63:ab:66:08:d7:a7:35:c1:ba:69:5e:
                    2a:8c:73:14:3e:c8:e9:09:16:9b:35:8f:67:50:ed:
                    76:ae:c9:a2:0d:6d:a6:6c:00:b7:81:cc:50:96:a2:
                    e0:2d:8b:ab:f4:7b:c1:f1:c5:b4:c6:ed:89:67:f0:
                    77:3d:79:8d:a6:15:6e:5a:c9:29:dd:8d:6e:d1:2b:
                    c8:63:3b:84:b0:4e:e5:58:36:c1:9a:d5:99:b5:a6:
                    c1:87:34:e1:90:34:2f:77:ed:e4:79:0d:6c:53:f6:
                    de:ab:53:5e:5d:f8:0a:cd:0e:46:fb:84:25:d8:f5:
                    18:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:FD:DA:14:C4:9F:30:DE:21:BD:1E:42:39:FC:AB:63:23:49:E0:F1:84

            Authority Information Access: 
                OCSP - URI:http://root-c3-ca2-2009.ocsp.d-trust.net

            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: http://www.d-trust.net/internet/files/D-TRUST_Root_PKI_CPS.pdf

            X509v3 Subject Alternative Name: 
                email:info@d-trust.net, URI:http://www.d-trust.net
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

                Full Name:
                  URI:http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_2009.crl

            X509v3 Subject Key Identifier: 
                50:19:32:94:9A:C4:B5:04:4D:56:D0:C0:83:21:D5:35:55:B0:B1:7A
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: sha256WithRSAEncryption
         13:39:41:11:d7:ff:22:27:b2:66:4b:59:59:6f:99:69:8a:6f:
         77:38:20:1d:e1:00:85:51:b0:01:a1:92:f4:09:fd:10:f5:19:
         98:d9:50:10:58:31:69:03:d4:fd:fb:7d:34:31:96:a4:ce:7b:
         73:5e:71:5b:c4:96:46:19:b8:2a:bb:1d:23:3a:a3:b6:b0:cd:
         bd:e6:c8:b9:f5:90:df:a1:0c:2b:31:5f:41:18:6d:54:8d:8c:
         48:e4:5b:74:04:92:a2:47:f6:8c:07:e2:a7:8c:0f:17:fb:b5:
         f5:c1:ec:15:4a:3b:ea:da:ad:83:da:d8:f4:7c:5b:3d:8a:86:
         31:43:98:07:85:83:62:7c:f5:87:29:78:92:44:10:95:e8:c1:
         e0:24:80:91:04:c3:01:08:7c:9d:b2:2e:36:28:ef:c4:43:d1:
         1b:e2:8f:ff:b3:91:f8:fd:f9:d4:af:4e:26:53:ba:a8:9c:ca:
         8d:fb:a8:da:18:1e:07:21:ba:a5:e7:2a:87:61:5a:45:bc:f6:
         8a:36:34:a8:5f:78:d1:c7:6e:ab:d7:10:99:b1:d0:f6:c8:e9:
         8c:90:e7:41:a7:60:40:99:44:73:4a:86:06:cf:12:d3:72:fd:
         07:ad:53:9d:da:5a:54:e5:be:ee:0d:23:02:d6:e5:75:6c:af:
         19:50:d9:9c

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06