D-TRUST_SSL_CA_2_2020.crt: CN=D-TRUST SSL CA 2 2020,O=D-Trust GmbH,C=DE

Page content

CA Certificate Basic Information

This certificate is intermediate certificate used for the issuance of other certificates.

  • Certificate download URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_CA_2_2020.crt (DER format)
  • Serial number: 114679658837365297096055106050254557491
  • SHA-1 Fingerprint: aeb9682b91d20b50384a2c6b6dacbb851f629962
  • SHA-1 Fingerprint: ae:b9:68:2b:91:d2:0b:50:38:4a:2c:6b:6d:ac:bb:85:1f:62:99:62
  • SHA-256 Fingerprint: 972a181b60294eba07333b9c1982440d43395aba91d450ec0efb485aed49d5a7
  • SHA-256 Fingerprint: 97:2a:18:1b:60:29:4e:ba:07:33:3b:9c:19:82:44:0d:43:39:5a:ba:91:d4:50:ec:0e:fb:48:5a:ed:49:d5:a7
  • Signature hash algorithm: sha384
  • Subject: CN=D-TRUST SSL CA 2 2020,O=D-Trust GmbH,C=DE
  • Not valid before: 2020-04-21 08:16:14
  • Not valid after: 2029-11-05 08:35:58
  • Issuer:
    • Issuer name: CN=D-TRUST Root Class 3 CA 2 2009,O=D-Trust GmbH,C=DE
    • Issuer certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Download certificate through curl:

curl -sSL http://www.d-trust.net/cgi-bin/D-TRUST_SSL_CA_2_2020.crt --output cert.crt

Download certificate through wget:

wget -q http://www.d-trust.net/cgi-bin/D-TRUST_SSL_CA_2_2020.crt --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:46:7f:b7:b1:b0:0f:5c:3f:a1:2b:46:c8:85:d1:33
    Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009
        Validity
            Not Before: Apr 21 08:16:14 2020 GMT
            Not After : Nov  5 08:35:58 2029 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST SSL CA 2 2020
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:36:e3:41:d4:8f:e8:f6:55:b6:21:01:30:9f:1b:
                    92:83:20:a2:12:94:b7:dc:3a:a7:46:da:92:f5:21:
                    ad:ac:7f:9c:1e:35:e1:7f:33:4a:49:b3:3b:ec:bc:
                    6b:59:a1:54:f1:ea:ff:6e:90:d0:6c:96:3a:59:c4:
                    c4:41:e2:f7:60:00:f4:ad:06:d4:4a:9a:03:b3:d5:
                    c5:02:6a:03:ed:5f:4c:86:63:b4:31:9f:39:3e:e4:
                    ae:5d:e1:0a:dd:cd:34
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                keyid:FD:DA:14:C4:9F:30:DE:21:BD:1E:42:39:FC:AB:63:23:49:E0:F1:84

            Authority Information Access: 
                OCSP - URI:http://root-c3-ca2-2009.ocsp.d-trust.net
                CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_Root_Class_3_CA_2_2009.crt
                CA Issuers - URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

            X509v3 Certificate Policies: 
                Policy: 0.4.0.2042.1.6
                Policy: 1.3.6.1.4.1.4788.2.202.3
                  CPS: http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_class_3_ca_2_2009.crl

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

            X509v3 Subject Key Identifier: 
                B9:13:F2:71:BC:6B:F5:8F:37:93:C2:4C:A5:87:EF:CA:4B:1F:F1:3C
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: sha384WithRSAEncryption
         c1:e0:1b:58:f4:a2:f5:c3:cb:f6:db:12:03:fe:a8:8a:51:5f:
         5b:3c:d5:56:5c:65:1c:58:d4:17:c8:bd:e2:69:c0:52:16:2e:
         c3:a4:3e:09:d4:01:39:38:ac:c6:00:da:f7:63:84:9e:b3:03:
         da:35:06:6c:a7:39:87:e9:14:4c:1f:54:ca:0d:16:89:db:e1:
         57:5c:e6:9a:14:31:c8:b2:12:d2:6a:df:7b:d5:9a:fe:a1:a7:
         0f:1f:df:68:32:c7:07:ff:45:82:8c:37:12:bf:12:0a:3e:64:
         ac:90:52:e9:dc:74:ff:8c:f5:31:27:e8:37:6c:5c:58:e6:8b:
         f7:dc:11:f1:37:dc:c6:db:a3:62:98:3e:59:47:23:be:5d:c5:
         ec:ca:65:ca:a4:18:4a:03:25:1a:f8:3f:10:f5:71:ec:e5:81:
         10:93:60:62:9b:73:52:33:7e:65:0b:67:b9:e8:19:16:b0:f3:
         59:7a:1a:9e:6c:db:01:71:4a:fc:1f:59:8b:4b:9b:5c:63:31:
         d9:6c:68:75:b2:24:43:96:ee:93:ac:78:c5:2c:20:7b:0e:d5:
         32:15:31:23:97:25:50:75:c0:2d:2f:33:6f:05:48:0d:66:df:
         8e:47:fc:c3:fb:23:7d:0a:15:d4:fe:d7:36:3b:c6:62:c7:14:
         a9:6f:6f:36

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: a651bdd 2022-03-26