DKBCA1O1-1.crt: CN=DKB CA 1O1,O=Deutsche Kreditbank AG,C=DE (Intermediate Certificate, Expiring 2031-03-29) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "http://cacerts.digicert.com/DKBCA1O1-1.crt" --output cert.crt

Download certificate through wget:

wget -q "http://cacerts.digicert.com/DKBCA1O1-1.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:47:a6:f3:a7:3e:25:68:ed:db:ca:bf:ff:79:dd:e9
    Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4
        Validity
            Not Before: Mar 30 00:00:00 2021 GMT
            Not After : Mar 29 23:59:59 2031 GMT
        Subject: C=DE, O=Deutsche Kreditbank AG, CN=DKB CA 1O1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:c9:1f:ee:d3:fd:8a:5c:90:68:10:2e:4f:9a:48:
                    cf:50:db:0f:5b:c8:d6:57:41:96:01:e2:af:24:ce:
                    1a:c4:0a:c8:02:33:b5:41:ed:54:5e:d8:18:fe:03:
                    7b:ce:76:88:0e:5d:52:db:dd:97:ef:e6:7f:41:d7:
                    3f:94:fc:20:63:1c:e6:52:6f:94:ac:20:69:b2:72:
                    c2:0a:64:c2:98:62:71:fc:58:0c:88:4d:e4:5b:90:
                    ec:64:58:cc:48:a9:38:b6:db:65:a0:4d:3a:c6:24:
                    ad:63:b5:0b:34:5e:32:2e:fc:ea:71:26:de:04:55:
                    99:6a:03:c6:d3:11:36:00:98:03:36:fe:f9:f7:da:
                    53:0e:87:fe:94:7f:79:6b:e1:76:cc:7f:67:68:17:
                    d8:72:d9:83:be:8d:d0:39:67:4e:0f:2a:c9:7c:21:
                    9c:c4:8a:bb:d6:d8:da:a8:0b:b1:5d:73:40:50:bc:
                    60:85:d8:27:61:60:79:8f:b5:0d:46:ec:4e:52:d5:
                    7b:c9:0a:7a:6e:83:ec:f5:eb:3c:96:cd:63:a0:5f:
                    c2:eb:a8:e4:75:a5:dc:75:83:cc:e0:c4:2c:1a:4e:
                    36:2f:bf:2c:a8:e0:17:2c:db:54:93:85:69:75:65:
                    8b:74:b6:6f:71:73:cd:70:cc:b4:7e:ec:58:fb:bb:
                    eb:92:ab:60:4c:bd:a9:c0:ad:17:ee:2f:1a:b1:33:
                    1d:a5:cb:30:84:b2:4a:46:3e:42:7e:73:58:4d:84:
                    09:ce:9f:4b:76:c5:3a:bb:d9:43:e1:da:ac:c4:79:
                    d7:bb:8f:5c:63:69:5f:06:6e:ff:38:b1:43:70:61:
                    f6:46:c9:a3:83:5c:23:8b:53:30:bd:44:c3:ac:d3:
                    6e:4d:42:a4:12:c4:2d:69:a0:ba:de:78:43:b7:b8:
                    ed:53:a1:a9:65:ac:71:51:d9:c6:73:89:80:06:60:
                    40:20:f8:83:b0:a7:bd:f3:59:88:f2:29:4d:36:ea:
                    25:18:b8:4a:b8:bb:89:21:7e:ac:9c:3c:6c:67:cd:
                    86:ca:d8:9d:4e:cb:ba:cc:2f:3f:4e:3a:aa:8d:a6:
                    65:6e:d4:41:3e:6d:ac:c8:a1:b6:db:1b:bf:eb:99:
                    1f:e4:9a:ba:8a:5d:6a:87:96:45:7c:df:18:83:63:
                    b4:ed:8b:e7:0f:3e:aa:6b:0b:c6:16:99:fd:18:98:
                    71:8c:e5:fb:18:d2:6f:f0:78:47:7d:9d:af:df:a8:
                    25:74:a7:7a:6b:2d:7b:cc:db:27:da:0d:29:72:84:
                    10:c6:92:71:a3:86:d3:76:37:95:45:24:bb:b8:f7:
                    16:71:07:ad:16:83:39:97:9f:98:3d:dc:d8:90:4f:
                    60:45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Subject Key Identifier: 
                DC:DF:C7:54:D4:30:FA:54:84:40:71:83:FF:D2:C3:CE:83:FD:C5:DC
            X509v3 Authority Key Identifier: 
                keyid:EC:D7:E3:82:D2:71:5D:64:4C:DF:2E:67:3F:E7:BA:98:AE:1C:0F:4F

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertTrustedRootG4.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertTrustedRootG4.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.2.1
                Policy: 2.23.140.1.1
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2
                Policy: 2.23.140.1.2.3

    Signature Algorithm: sha384WithRSAEncryption
         48:64:cf:08:4b:60:a9:4e:a7:66:fb:17:1e:44:5a:93:ed:1e:
         2a:45:dc:37:0f:45:de:46:c1:23:db:a2:58:3a:05:5c:5a:63:
         2c:3d:35:dc:24:ff:86:02:d3:70:c3:6a:08:76:76:9e:51:df:
         ac:ac:73:a2:8e:b1:71:bf:d1:3b:eb:6b:52:0d:5e:1a:82:b1:
         d0:33:8b:d5:4f:1d:b8:7f:e2:1b:da:b2:5d:ea:ec:fe:40:27:
         94:70:26:cf:4b:1d:a1:ae:7b:fd:16:9c:bd:4b:1c:52:f5:1a:
         68:bc:1d:b1:c1:04:f7:a2:b1:75:fa:1c:2f:f2:02:21:a1:36:
         90:4f:9d:69:29:13:c6:75:41:a1:81:34:c0:3c:59:fb:3d:02:
         6e:49:fa:b8:ff:54:d9:54:26:0c:6b:e9:55:0e:c7:45:87:5d:
         41:fb:2c:b5:a2:92:d0:c2:ec:68:96:13:cc:e2:63:19:f4:a5:
         22:ee:da:85:8c:c8:f2:a8:60:df:99:85:94:0a:9d:1f:f0:59:
         cc:e1:39:62:f9:98:4f:9b:b4:62:a3:9c:95:27:c5:54:8a:9c:
         ca:87:a4:c2:97:ab:a8:40:06:a4:5b:10:fd:82:70:e8:67:df:
         b0:ff:d8:32:ac:0d:db:a1:4b:12:2f:c7:df:20:56:6f:a5:cd:
         59:27:cb:73:98:8a:30:f7:31:37:2e:a4:1d:ed:b3:28:04:9a:
         4d:ba:ac:e4:ab:35:70:d2:a5:d2:c5:48:e6:84:f7:d0:ee:39:
         27:4e:ec:0c:fe:db:ab:17:50:8a:a1:63:52:16:08:20:d0:c5:
         06:72:af:e2:81:a0:26:00:35:f8:94:92:88:76:8e:19:ca:a9:
         bb:2e:50:61:ed:0d:f9:6c:6f:ff:60:38:86:e5:7f:44:c8:11:
         09:15:15:9b:20:05:0b:26:fd:16:1b:7c:f0:c7:ae:91:bd:e7:
         f8:09:7f:f9:34:63:cf:54:83:aa:11:bd:0c:cd:59:53:55:54:
         31:33:58:3f:a6:69:93:17:7a:98:cf:81:5e:c1:eb:cd:0a:a8:
         d8:e3:a1:d3:2e:12:73:53:c7:4a:89:dd:c2:01:5b:e3:8a:8b:
         80:7f:53:fd:a4:6e:59:8f:f7:bd:c2:00:2b:2b:59:2a:2f:28:
         1e:2f:dc:2e:19:47:57:42:8b:9f:11:bd:e4:46:3e:b6:0c:57:
         03:3c:38:e2:6f:4f:2a:f8:58:12:58:df:04:a9:d7:19:42:77:
         61:f8:c9:12:c5:5f:5d:b3:42:e3:1f:48:2f:86:4a:b4:c3:00:
         32:bb:d0:8a:42:ff:68:ad:4e:4f:74:7a:b0:93:ff:ec:7e:24:
         72:df:0f:75:de:94:36:f7

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06