D-Trust.SMCB-CA32.crt: CN=D-Trust.SMCB-CA32,OU=Institution des Gesundheitswesens-CA der Telematikinfrastruktur,O=D-TRUST GmbH,C=DE (Intermediate Certificate, Expiring 2030-08-30) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-Trust.SMCB-CA32.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-Trust.SMCB-CA32.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=DE, O=gematik GmbH, OU=Zentrale Root-CA der Telematikinfrastruktur, CN=GEM.RCA6
        Validity
            Not Before: Sep  1 08:46:55 2022 GMT
            Not After : Aug 30 08:46:54 2030 GMT
        Subject: C=DE, O=D-TRUST GmbH, OU=Institution des Gesundheitswesens-CA der Telematikinfrastruktur, CN=D-Trust.SMCB-CA32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a0:93:46:c7:c7:da:e6:37:b0:df:d6:1d:aa:
                    64:8b:5d:0e:be:73:fb:5e:3b:ff:ea:8e:9f:5b:87:
                    2c:69:c8:18:d8:59:34:ef:80:46:c5:6c:aa:ea:93:
                    28:12:b5:ab:39:8d:31:af:53:43:d9:5c:f9:34:56:
                    6a:00:02:80:cd:43:23:e7:96:0a:0b:e5:e5:c3:d3:
                    91:4a:fd:35:a0:c8:9e:ab:52:ef:00:00:72:cf:1c:
                    df:f9:13:d5:da:a1:c5:ef:8c:b5:dd:a3:86:9f:fc:
                    2f:18:80:d5:ff:9e:6d:b0:54:97:c5:cf:4c:07:25:
                    4d:08:b6:a6:b6:e8:00:fc:c8:14:dd:75:cc:b6:54:
                    67:0e:5e:45:64:8a:1e:49:a7:9a:02:45:30:af:1d:
                    f4:45:d8:91:c1:b9:9a:1c:ba:9b:73:4d:93:c1:81:
                    50:52:63:90:89:8b:6f:22:88:c9:88:45:27:10:48:
                    e9:52:96:9b:ab:87:92:39:0a:0d:d6:62:91:43:91:
                    2e:ab:d3:33:b6:81:f3:31:cf:9d:3c:c8:90:84:2d:
                    7d:c5:3e:d7:2f:d0:2f:68:26:96:3d:93:3c:e2:d3:
                    9d:96:0b:51:d3:12:ac:fb:c1:d3:7f:71:05:26:97:
                    1b:80:da:4b:aa:e0:00:f6:79:86:10:35:dd:ce:49:
                    de:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A4:41:67:DF:3A:50:38:F2:37:0D:12:F1:53:07:25:FA:F9:5D:A7:EA
            X509v3 Authority Key Identifier: 
                keyid:18:44:C4:DA:66:93:3A:EF:4F:3B:2A:09:65:E4:FE:28:90:1E:55:11

            Authority Information Access: 
                OCSP - URI:http://ocsp.root-ca.ti-dienste.de/ocsp

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies: 
                Policy: 1.2.276.0.76.4.163
                  CPS: http://www.gematik.de/go/policies

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: sha256WithRSAEncryption
         5c:d3:7d:e0:ad:36:fb:3c:a0:1a:79:7f:d5:0e:f2:95:8f:33:
         ae:69:2c:a3:ad:28:9d:22:e7:27:12:7e:77:76:93:4c:6c:44:
         a6:ce:fa:e0:d2:65:44:3a:3a:17:ae:48:85:96:62:e3:d7:63:
         70:89:14:d5:79:f8:d6:6b:03:8a:23:0b:e4:bc:88:1c:73:b2:
         7b:0e:2d:63:92:f5:15:ef:8e:64:b4:31:40:f0:87:9f:01:c0:
         82:2f:68:ff:41:d1:bf:e5:c3:e6:78:e5:42:d3:38:0f:a2:10:
         ff:34:dc:78:e8:c0:39:3e:40:bd:ab:80:83:52:81:8a:36:68:
         75:e6:5f:8d:4f:75:1c:03:15:03:d3:94:9f:4e:8f:dc:1f:af:
         a2:ce:fd:de:d0:a1:7b:2f:ab:78:17:9d:5a:27:b2:ca:39:e2:
         b3:19:95:2b:52:a8:05:2b:4b:c2:1c:9e:2c:05:81:f0:9f:f0:
         17:7c:c4:fb:4a:83:64:23:93:0e:c5:a8:48:76:3f:32:01:4e:
         21:48:83:f5:1a:ce:e0:c0:c8:e0:14:fa:e1:f3:9d:3b:a2:98:
         6a:91:0f:2c:86:37:2e:e4:c4:0d:38:41:5a:ae:71:13:6c:61:
         86:b3:8d:c3:c6:0f:c3:d5:47:59:a5:72:d0:7f:9c:e1:86:4c:
         12:5d:99:1c

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06