cacert.crt: CN=DFN-Verein Global Issuing CA,OU=DFN-PKI,O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.,C=DE (Intermediate Certificate, Expiring 2031-02-22) detail info and audit record

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

• Certificate Download URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt (in DER format )
• Serial Number : 7709478377892925
• SHA-1 Fingerprint : c9dcb047ac8c5f0905ed77528cbd4b84d9463c45
• SHA-1 Fingerprint : c9:dc:b0:47:ac:8c:5f:09:05:ed:77:52:8c:bd:4b:84:d9:46:3c:45
• SHA-256 Fingerprint : 1257aac2f4eeac6ca4942c2c83f0b67b41a3b47120c4d53429929513acad468c
• SHA-256 Fingerprint : 12:57:aa:c2:f4:ee:ac:6c:a4:94:2c:2c:83:f0:b6:7b:41:a3:b4:71:20:c4:d5:34:29:92:95:13:ac:ad:46:8c
• Signature Hash Algorithm : sha256
• Subject : CN=DFN-Verein Global Issuing CA,OU=DFN-PKI,O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.,C=DE
  • Country Name: DE (Germany)
  • Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
  • Organization Unit: DFN-PKI
  • Common Name: DFN-Verein Global Issuing CA
• Not Valid Before: 2016-05-24 11:38:40
• Not Valid After: 2031-02-22 23:59:59
• Issuer (Parent Certificate):
  • Issuer Name: CN=DFN-Verein Certification Authority 2,OU=DFN-PKI,O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.,C=DE
  • Issuer Certificate URL: NA
• Audit Record:
  • Revocation Status: Not Revoked
  • Certificate Policy (CP) URL: Unknown
  • Certificate Practice Statement (CPS) URL: Unknown
  • No public standard audit information was found by E2Encrypted.com. We update this information regularly, check back later.
  • Check its issuer’s audit information: CN=DFN-Verein Certification Authority 2,OU=DFN-PKI,O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.,C=DE .

Download certificate through curl:

curl -sSL "http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt" --output cert.crt

Download certificate through wget:

wget -q "http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7709478377892925 (0x1b63bad01e2c3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=DE, O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V., OU=DFN-PKI, CN=DFN-Verein Certification Authority 2
        Validity
            Not Before: May 24 11:38:40 2016 GMT
            Not After : Feb 22 23:59:59 2031 GMT
        Subject: C=DE, O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V., OU=DFN-PKI, CN=DFN-Verein Global Issuing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3b:79:1c:47:de:1f:86:cb:c6:69:d7:10:9e:
                    39:d7:d9:a2:30:db:72:1c:05:7f:29:5f:4b:68:f1:
                    ad:19:d6:4c:e1:6b:1b:b1:0b:7f:a1:ab:e0:7b:8b:
                    8b:d8:2d:ce:6e:88:3a:10:ee:57:e5:1e:7f:04:51:
                    36:eb:ba:70:6d:63:a0:be:96:2e:40:e1:d1:83:4c:
                    66:3d:1c:64:69:e5:9b:a4:ad:72:ae:68:39:51:87:
                    79:cc:17:d3:ae:2f:5d:63:71:4b:39:7a:eb:42:a7:
                    97:90:69:05:bf:90:ff:a4:40:70:bd:03:e7:bf:9e:
                    18:88:1f:9f:99:88:4d:0e:47:8d:48:5f:65:99:10:
                    d2:d9:2a:49:ed:c1:b9:2d:1d:9f:12:cb:15:d3:3f:
                    7f:1e:54:2f:3a:ae:93:57:a7:7e:78:ca:d5:4a:e2:
                    1a:e5:ed:41:7d:53:5f:c8:b3:2a:f5:8a:30:ac:ed:
                    17:05:24:3f:b6:a0:0b:07:fd:4d:1a:9a:03:52:a0:
                    36:9c:de:24:87:65:e4:e7:fa:c7:96:73:24:14:cd:
                    d0:e8:1b:68:9e:18:59:ae:76:7e:f7:d1:0a:78:3c:
                    87:4b:b0:37:cf:53:ca:3a:38:10:f3:cb:47:6d:8c:
                    64:3d:3c:5a:45:4a:ba:ca:80:7c:b8:f3:e7:a7:4c:
                    4c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:1
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.22177.300.30
                Policy: 1.3.6.1.4.1.22177.300.1.1.4

            X509v3 Subject Key Identifier: 
                6B:3A:98:8B:F9:F2:53:89:DA:E0:AD:B2:32:1E:09:1F:E8:AA:3B:74
            X509v3 Authority Key Identifier: 
                keyid:93:E3:D8:32:26:DA:D5:F1:4A:A5:91:4A:E0:EA:4B:E2:A2:0C:CF:E1

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://cdp1.pca.dfn.de/global-root-g2-ca/pub/crl/cacrl.crl

                Full Name:
                  URI:http://cdp2.pca.dfn.de/global-root-g2-ca/pub/crl/cacrl.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.pca.dfn.de/OCSP-Server/OCSP
                CA Issuers - URI:http://cdp1.pca.dfn.de/global-root-g2-ca/pub/cacert/cacert.crt
                CA Issuers - URI:http://cdp2.pca.dfn.de/global-root-g2-ca/pub/cacert/cacert.crt

    Signature Algorithm: sha256WithRSAEncryption
         81:78:45:a4:4e:a4:7f:0e:55:f0:09:b1:6a:3e:78:cc:68:35:
         a9:1c:f3:95:9e:3f:f3:f8:df:6b:38:77:89:2c:8d:b5:ad:3e:
         c7:f2:94:cd:a0:06:ae:ba:cc:a8:b1:ad:33:08:b6:24:86:62:
         36:4c:78:6e:50:f0:d5:6e:60:8d:4f:52:31:43:97:46:75:f0:
         62:e4:6e:66:51:c1:42:31:67:50:e5:49:e7:39:1e:cb:9f:ca:
         86:48:de:08:14:ff:15:4b:2b:66:9b:a0:38:9f:00:ce:fd:a7:
         eb:d1:7f:57:2d:c8:4c:5f:dc:10:11:97:3e:96:04:02:5c:84:
         a8:29:39:6c:94:fc:10:92:06:7b:9e:ee:d8:46:b4:1b:b5:03:
         0c:38:d9:dc:b0:a9:3f:71:06:0b:b2:03:07:33:c2:8d:48:63:
         25:25:3c:7a:7b:57:6e:f7:8a:05:38:ef:b8:a0:ae:2f:f4:db:
         07:d5:5b:84:18:c1:a9:b8:4b:ce:6c:90:1a:82:e4:b9:3d:fa:
         77:f1:d2:1f:33:02:bf:53:e7:76:f9:dc:26:25:41:6f:2f:a6:
         1b:fa:a4:13:90:fa:7c:7e:d9:0b:60:5d:ec:bf:ca:41:a0:61:
         fb:11:49:29:d8:a8:2d:75:15:d8:4a:18:ea:16:ef:55:34:22:
         1a:13:8d:06

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Related Certificates

• cacert.crt: CN=DFN-Verein Certification Authority 2,OU=DFN-PKI,O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.,C=DE (Expiring: 2031-02-22)
• cacert.crt: CN=Fraunhofer Service CA - G02,OU=Fraunhofer Corporate PKI,O=Fraunhofer,L=Muenchen,ST=Bayern,C=DE (Expiring: 2031-02-22)
• cacert.crt: CN=MPG CA - G02,O=Max-Planck-Gesellschaft,L=Muenchen,ST=Bayern,C=DE (Expiring: 2031-02-22)
• cacert.crt: CN=TU Dresden CA,O=Technische Universitaet Dresden,L=Dresden,ST=Sachsen,C=DE (Expiring: 2031-02-22)
• cacert.crt: CN=TU Ilmenau CA G2,O=Technische Universitaet Ilmenau,C=DE (Expiring: 2031-02-22)