D-TRUST_SSL_CA_2_2020.crt: CN=D-TRUST SSL CA 2 2020,O=D-Trust GmbH,C=DE
Page content
CA Certificate Basic Information
This certificate is intermediate certificate used for the issuance of other certificates.
- Certificate download URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_CA_2_2020.crt
(
DER
format) - Serial number: 114679658837365297096055106050254557491
- SHA-1 Fingerprint: aeb9682b91d20b50384a2c6b6dacbb851f629962
- SHA-1 Fingerprint: ae:b9:68:2b:91:d2:0b:50:38:4a:2c:6b:6d:ac:bb:85:1f:62:99:62
- SHA-256 Fingerprint: 972a181b60294eba07333b9c1982440d43395aba91d450ec0efb485aed49d5a7
- SHA-256 Fingerprint: 97:2a:18:1b:60:29:4e:ba:07:33:3b:9c:19:82:44:0d:43:39:5a:ba:91:d4:50:ec:0e:fb:48:5a:ed:49:d5:a7
- Signature hash algorithm: sha384
- Subject: CN=D-TRUST SSL CA 2 2020,O=D-Trust GmbH,C=DE
- Not valid before: 2020-04-21 08:16:14
- Not valid after: 2029-11-05 08:35:58
- Issuer:
- Issuer name: CN=D-TRUST Root Class 3 CA 2 2009,O=D-Trust GmbH,C=DE
- Issuer certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?
Download certificate through curl
:
curl -sSL http://www.d-trust.net/cgi-bin/D-TRUST_SSL_CA_2_2020.crt --output cert.crt
Download certificate through wget
:
wget -q http://www.d-trust.net/cgi-bin/D-TRUST_SSL_CA_2_2020.crt --output-document=cert.crt
CA Certificate Detail Information
Use openssl x509
to decode certificate to get detail information:
openssl x509 -in cert.crt -inform der -text -noout
Decoded detail certificate information:
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:46:7f:b7:b1:b0:0f:5c:3f:a1:2b:46:c8:85:d1:33
Signature Algorithm: sha384WithRSAEncryption
Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009
Validity
Not Before: Apr 21 08:16:14 2020 GMT
Not After : Nov 5 08:35:58 2029 GMT
Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST SSL CA 2 2020
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (384 bit)
pub:
04:36:e3:41:d4:8f:e8:f6:55:b6:21:01:30:9f:1b:
92:83:20:a2:12:94:b7:dc:3a:a7:46:da:92:f5:21:
ad:ac:7f:9c:1e:35:e1:7f:33:4a:49:b3:3b:ec:bc:
6b:59:a1:54:f1:ea:ff:6e:90:d0:6c:96:3a:59:c4:
c4:41:e2:f7:60:00:f4:ad:06:d4:4a:9a:03:b3:d5:
c5:02:6a:03:ed:5f:4c:86:63:b4:31:9f:39:3e:e4:
ae:5d:e1:0a:dd:cd:34
ASN1 OID: secp384r1
NIST CURVE: P-384
X509v3 extensions:
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Authority Key Identifier:
keyid:FD:DA:14:C4:9F:30:DE:21:BD:1E:42:39:FC:AB:63:23:49:E0:F1:84
Authority Information Access:
OCSP - URI:http://root-c3-ca2-2009.ocsp.d-trust.net
CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_Root_Class_3_CA_2_2009.crt
CA Issuers - URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?
X509v3 Certificate Policies:
Policy: 0.4.0.2042.1.6
Policy: 1.3.6.1.4.1.4788.2.202.3
CPS: http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.d-trust.net/crl/d-trust_root_class_3_ca_2_2009.crl
Full Name:
URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
X509v3 Subject Key Identifier:
B9:13:F2:71:BC:6B:F5:8F:37:93:C2:4C:A5:87:EF:CA:4B:1F:F1:3C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
Signature Algorithm: sha384WithRSAEncryption
c1:e0:1b:58:f4:a2:f5:c3:cb:f6:db:12:03:fe:a8:8a:51:5f:
5b:3c:d5:56:5c:65:1c:58:d4:17:c8:bd:e2:69:c0:52:16:2e:
c3:a4:3e:09:d4:01:39:38:ac:c6:00:da:f7:63:84:9e:b3:03:
da:35:06:6c:a7:39:87:e9:14:4c:1f:54:ca:0d:16:89:db:e1:
57:5c:e6:9a:14:31:c8:b2:12:d2:6a:df:7b:d5:9a:fe:a1:a7:
0f:1f:df:68:32:c7:07:ff:45:82:8c:37:12:bf:12:0a:3e:64:
ac:90:52:e9:dc:74:ff:8c:f5:31:27:e8:37:6c:5c:58:e6:8b:
f7:dc:11:f1:37:dc:c6:db:a3:62:98:3e:59:47:23:be:5d:c5:
ec:ca:65:ca:a4:18:4a:03:25:1a:f8:3f:10:f5:71:ec:e5:81:
10:93:60:62:9b:73:52:33:7e:65:0b:67:b9:e8:19:16:b0:f3:
59:7a:1a:9e:6c:db:01:71:4a:fc:1f:59:8b:4b:9b:5c:63:31:
d9:6c:68:75:b2:24:43:96:ee:93:ac:78:c5:2c:20:7b:0e:d5:
32:15:31:23:97:25:50:75:c0:2d:2f:33:6f:05:48:0d:66:df:
8e:47:fc:c3:fb:23:7d:0a:15:d4:fe:d7:36:3b:c6:62:c7:14:
a9:6f:6f:36
CA Certificate in PEM Format
Use openssl x509
to convert certificate from DER
format to PEM
format:
openssl x509 -in cert.crt -inform der
Converted PEM
format certificate:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Also see Top 1 Millions Domains CA Certificate List
Related Certificates
- D-TRUST_CA_2-2_EV_2016.crt: 2.5.4.97=NTRDE-HRB74346,CN=D-TRUST CA 2-2 EV 2016,O=D-Trust GmbH,C=DE
- D-TRUST_Root_Class_3_CA_2_2009.crt: CN=D-TRUST Root Class 3 CA 2 2009,O=D-Trust GmbH,C=DE
- D-TRUST_Root_Class_3_CA_2_EV_2009.crt: CN=D-TRUST Root Class 3 CA 2 EV 2009,O=D-Trust GmbH,C=DE
- D-TRUST_SSL_Class_3_CA_1_2009.crt: CN=D-TRUST SSL Class 3 CA 1 2009,O=D-Trust GmbH,C=DE
- D-TRUST_SSL_Class_3_CA_1_EV_2009.crt: CN=D-TRUST SSL Class 3 CA 1 EV 2009,O=D-Trust GmbH,C=DE