D-TRUST_Qualified_Root_CA_4_2012.crt: CN=D-TRUST Qualified Root CA 4 2012:PN,O=D-Trust GmbH,C=DE (Root Certificate, Expiring 2017-07-19) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_Qualified_Root_CA_4_2012.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_Qualified_Root_CA_4_2012.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 985543 (0xf09c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Qualified Root CA 4 2012:PN
        Validity
            Not Before: Jul 19 18:06:11 2012 GMT
            Not After : Jul 19 18:06:11 2017 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST Qualified Root CA 4 2012:PN
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:be:51:ca:4f:93:b0:8c:0c:87:cb:1a:cb:
                    79:b0:28:e3:ad:fc:c7:5a:44:47:07:36:e1:2f:70:
                    ed:b8:a7:63:e4:a8:0c:f5:32:39:93:9b:f3:a6:55:
                    4d:a6:63:98:1f:de:a6:5a:e7:fb:36:fd:77:78:a8:
                    53:9a:30:ef:6d:91:a7:c5:82:36:cb:6a:a5:f0:d2:
                    e3:04:1a:ae:64:a0:99:2c:bd:f4:b4:0e:d3:f9:2c:
                    4f:ab:8c:9b:30:e3:31:07:be:43:ee:65:c3:1a:af:
                    40:52:9a:e4:cf:23:21:af:d6:aa:14:cb:85:7c:ab:
                    01:f3:e9:5e:d2:32:07:33:b0:19:7e:7e:c6:86:88:
                    7a:0c:b5:bc:ec:17:d3:0a:7e:90:0c:bb:9f:7d:69:
                    be:a4:46:74:71:da:e3:f3:5f:fe:82:1c:6f:b1:2f:
                    fe:a6:54:1b:fb:21:1b:4a:06:cb:9a:2e:21:07:30:
                    ae:d2:d3:7b:4f:41:c7:3b:bb:f5:88:a0:28:84:aa:
                    94:0e:3c:3a:4d:cf:4c:27:05:e3:b3:d6:cc:c2:0c:
                    16:bd:9a:ce:42:24:19:f2:8b:4f:2e:15:d8:20:ee:
                    48:e0:d3:e2:6c:14:2d:13:c0:c4:da:e1:44:e2:15:
                    cd:fd:b6:b5:6e:bf:63:2b:55:76:4a:55:83:69:c9:
                    9d:9f
                Exponent: 2533636811 (0x97043acb)
        X509v3 extensions:
            qcStatements: 
                0
0......F..
            Authority Information Access: 
                OCSP - URI:http://qual.ocsp.d-trust.net

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4788.2.31.1

            X509v3 Subject Alternative Name: 
                email:info@d-trust.net, URI:http://www.d-trust.net
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Qualified%20Root%20CA%204%202012%3APN,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
                  URI:http://crl.d-trust.net/crl/d-trust_qualified_root_ca_4_2012.crl

            X509v3 Subject Key Identifier: 
                5E:39:08:27:1F:38:73:A9:43:FD:59:F3:66:45:AF:2B:E7:02:9D:C0
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         7e:d1:71:ab:c2:27:63:47:68:c0:4a:e9:fd:9f:38:98:a3:c2:
         2a:2f:2d:0d:29:b8:b8:58:0f:08:12:e0:a9:3c:af:c0:6b:d2:
         fd:ae:a1:e6:58:51:82:90:40:fb:c0:e4:dc:d5:8d:de:f4:c6:
         7c:f2:8a:b6:47:06:55:a0:b2:f1:2f:91:a4:c0:66:3f:19:48:
         04:31:ca:82:d8:39:67:f5:d2:e2:05:27:bf:84:99:65:db:2a:
         90:8b:4c:8e:6e:68:04:a0:da:a1:f6:07:85:1f:1f:86:91:8f:
         46:6f:8b:d9:9b:41:a7:b3:08:17:e7:a3:43:07:2e:81:d8:7e:
         9e:d1:2a:de:7f:06:94:12:3f:b0:d7:46:0b:8b:b3:09:86:c2:
         33:bb:34:31:dd:2e:9b:96:4c:55:fb:45:5f:4a:4a:56:76:05:
         45:4a:7c:ab:f9:ed:9c:c4:37:ce:7d:f6:eb:4c:c5:97:13:44:
         46:1e:bf:33:76:ba:cc:1c:08:a2:5f:5b:f8:d7:de:e2:3a:e5:
         a2:d9:95:15:96:03:49:4c:d1:b8:d8:6d:bf:ba:f7:cd:56:6c:
         5d:e7:3f:ee:60:4c:35:5f:57:7d:1c:80:c9:8f:ac:a0:61:04:
         b2:7d:03:9e:fd:5d:a2:32:61:b6:36:00:c5:72:54:bf:b1:07:
         11:58:26:db

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06