D-TRUST_Root_CA_2_2021.crt: CN=D-TRUST Root CA 2 2021,O=D-Trust GmbH,C=DE (Root Certificate, Expiring 2036-02-17) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_2_2021.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_2_2021.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e9:d6:49:57:bc:f2:af:d6:bc:4c:60:73:b2:53:d0
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 2 2021
        Validity
            Not Before: Feb 17 09:50:00 2021 GMT
            Not After : Feb 17 09:49:59 2036 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 2 2021
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:fa:a2:f0:c0:d2:78:c0:cd:46:4a:91:53:31:3b:
                    6f:8c:20:32:1b:84:0e:f7:ad:a4:e6:23:c3:80:21:
                    5b:38:4f:5f:47:5d:d0:21:e2:29:f5:55:34:95:21:
                    5c:87:1b:f4:92:79:e7:fb:28:01:6a:c6:a4:f0:cc:
                    c7:e1:e3:93:4e:3a:5f:12:a8:b3:af:fe:9b:1f:dd:
                    fe:ec:59:9b:db:e1:6f:46:67:50:d6:64:06:f3:27:
                    91:2c:87:b8:bc:56:c8
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                A0:A5:B5:F8:2F:64:45:98:6B:A5:2F:D7:60:E2:EA:5F:31:09:B2:68
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_ca_2_2021.crl

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20CA%202%202021,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

    Signature Algorithm: ecdsa-with-SHA384
         30:65:02:31:00:9a:34:6a:fa:69:77:c3:61:83:e2:35:f6:72:
         3e:63:3d:c3:5d:d3:de:8c:d3:26:2f:18:54:76:24:c4:75:29:
         4a:be:eb:54:1d:13:5e:1b:88:9c:54:ee:21:09:f2:77:27:02:
         30:10:38:9f:75:bb:fd:50:d4:df:a6:ce:cb:91:f6:98:6a:78:
         f5:70:76:fe:3c:e1:2c:42:b1:c4:1f:5f:11:69:ed:9d:a0:14:
         ea:c1:9e:21:59:2d:bf:ad:8a:80:a6:45:06

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06