D-TRUST_CA_2-2_EV_2016.crt: 2.5.4.97=NTRDE-HRB74346,CN=D-TRUST CA 2-2 EV 2016,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2029-11-05) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_CA_2-2_EV_2016.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_CA_2-2_EV_2016.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041550 (0xfe48e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 EV 2009
        Validity
            Not Before: Nov 16 09:46:19 2016 GMT
            Not After : Nov  5 08:50:46 2029 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST CA 2-2 EV 2016/2.5.4.97=NTRDE-HRB74346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f6:c6:19:54:f8:9c:21:fe:0b:36:99:91:90:
                    d6:a9:75:a2:5d:b0:6e:dd:41:29:48:f0:66:00:a0:
                    de:a7:09:28:73:b6:f5:de:f5:65:46:bb:de:84:19:
                    b5:d7:25:0d:cd:a3:7b:b6:1b:2a:07:e5:57:13:21:
                    78:3a:ec:64:08:99:19:44:22:54:7e:b4:b5:cd:d9:
                    d9:5e:9b:5f:df:ad:68:6a:10:97:f9:c8:76:13:81:
                    dd:79:d7:9e:b7:8e:66:ca:9c:0a:b0:3e:c5:a9:27:
                    73:d3:52:98:a3:ac:05:40:c9:e7:66:c4:50:b5:a9:
                    a2:96:09:40:81:3d:37:89:35:1f:f9:89:fc:6b:99:
                    ac:57:b7:ec:72:97:e4:2d:41:82:b6:37:8c:d9:e5:
                    a0:7d:9d:88:d2:9a:a2:9b:70:d8:ad:05:39:ff:c8:
                    a7:e8:3b:59:2e:b2:00:81:9a:67:42:c8:09:88:1d:
                    e0:97:1d:18:70:15:ec:e5:86:51:f5:b7:e1:38:fe:
                    f5:9c:bb:cc:fb:db:e4:c4:d4:78:57:dd:12:3a:7c:
                    04:cc:26:e3:e5:57:e8:ae:e3:60:3f:4b:29:b4:2d:
                    93:48:f8:aa:34:6f:6c:81:dc:92:06:86:f3:f5:a3:
                    b9:af:2a:86:db:51:97:31:c7:c5:a7:4b:c2:cf:69:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:D3:94:8A:4C:62:13:2A:19:2E:CC:AF:72:8A:7D:36:D7:9A:1C:DC:67

            Authority Information Access: 
                OCSP - URI:http://root-c3-ca2-ev-2009.ocsp.d-trust.net
                CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_Root_Class_3_CA_2_EV_2009.crt
                CA Issuers - URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%20EV%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

            X509v3 Certificate Policies: 
                Policy: 0.4.0.194112.1.4
                Policy: 1.3.6.1.4.1.4788.2.150.4
                Policy: 1.3.6.1.4.1.4788.2.202.1
                  CPS: http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%20EV%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_class_3_ca_2_ev_2009.crl

            X509v3 Subject Key Identifier: 
                21:AF:6A:26:98:71:E9:26:0A:D5:DB:A1:8C:F7:DB:A6:9D:A5:25:5C
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: sha256WithRSAEncryption
         42:13:ac:46:45:53:86:ce:cb:ed:bb:e1:2d:93:1c:e7:bd:95:
         ec:20:63:2f:b9:39:88:7f:5a:be:d0:5b:34:62:fd:b3:14:e8:
         64:6d:6a:0f:5f:0a:72:2c:5e:89:f7:fb:6c:0a:18:bd:b6:26:
         08:c8:f9:69:d9:6b:94:d1:89:ac:d4:39:db:4e:8c:21:2e:c3:
         15:d7:31:81:ff:3d:a0:41:6f:f0:57:99:f1:a5:10:71:87:2f:
         f9:63:35:06:ae:3a:bb:1f:21:05:d7:0d:84:df:66:4f:63:c0:
         b4:20:3e:61:79:e1:49:66:ea:82:ec:52:bb:d8:a7:59:ea:e2:
         34:80:c9:63:98:fa:67:31:16:51:a0:64:fb:79:8d:d2:f5:0d:
         29:33:74:bb:5d:59:f1:ac:fb:55:12:aa:6c:7f:20:16:4b:7c:
         2c:1a:bd:d9:34:0e:6e:5f:c1:04:86:88:8f:9a:bf:9e:24:53:
         41:38:ce:20:c4:38:9d:b9:ad:f8:8e:04:6a:a3:87:ee:0d:15:
         e8:00:69:09:53:79:5a:75:cc:e0:a3:b4:a0:9f:f5:85:83:4b:
         c0:60:25:3f:8e:46:2d:94:29:5f:ce:f1:66:96:67:7a:91:2e:
         e5:5a:be:99:e0:d7:8b:31:e2:86:bc:14:b3:3d:b0:a0:56:bc:
         8f:87:e5:75

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06