D-TRUST_Advanced_Class_3_CA_1_2009.crt: CN=D-TRUST Advanced Class 3 CA 1 2009,O=D-TRUST GmbH,C=DE (Intermediate Certificate, Expiring 2022-05-16) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_Advanced_Class_3_CA_1_2009.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_Advanced_Class_3_CA_1_2009.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621891 (0x97d43)
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2007
        Validity
            Not Before: Oct 22 07:16:48 2009 GMT
            Not After : May 16 05:20:47 2022 GMT
        Subject: C=DE, O=D-TRUST GmbH, CN=D-TRUST Advanced Class 3 CA 1 2009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1d:e5:64:2b:62:27:5d:77:6b:bf:7d:f6:c1:
                    40:55:6c:ff:fe:62:15:0d:71:cc:37:c1:62:30:d6:
                    aa:96:e2:22:dc:90:16:5b:d9:9e:fa:c7:3f:38:ec:
                    9c:60:12:04:81:39:e2:b9:ad:3f:02:c2:0a:88:f1:
                    5c:ee:94:fa:80:3c:a8:a0:41:da:6c:0f:e3:5e:b3:
                    22:28:83:da:e7:8e:cb:ac:c3:86:71:dc:a3:0b:47:
                    87:27:99:c0:fa:10:86:c0:df:b4:5d:59:bf:ef:2b:
                    96:cf:8e:c0:ee:a0:29:17:53:ee:53:4f:e6:13:31:
                    9c:4f:1c:78:b6:3c:db:83:12:8d:f2:38:0b:59:f5:
                    23:38:1e:fe:68:51:b9:a7:fb:e2:4e:40:41:03:f4:
                    8f:22:26:0e:4c:11:1e:24:98:a8:f5:88:f6:75:f4:
                    d0:3a:f1:df:a3:4c:ad:97:3e:2e:ca:f0:db:1a:c5:
                    00:c8:ce:fb:b8:2e:64:aa:ce:c1:5d:4c:b5:48:c1:
                    9e:55:74:ee:05:78:c2:70:9e:4a:99:16:03:2d:f6:
                    55:5e:db:7d:65:24:f4:5a:f3:be:e8:00:a5:76:f2:
                    86:27:fd:42:78:17:13:cd:4a:1b:36:26:5b:3e:89:
                    27:ee:fd:67:3c:a9:bf:84:be:39:e7:0b:4b:10:c0:
                    9d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:82:2F:36:23:49:78:20:42:D7:B0:52:58:A0:D6:74:54:15:78:BF:AA

            Authority Information Access: 
                OCSP - URI:http://users.ocsp.d-trust.net

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4788.2.200.1
                  CPS: http://www.d-trust.net/repository/CPS_Class_3_2_1.pdf

            X509v3 Subject Alternative Name: 
                email:info@d-trust.net, URI:http://www.d-trust.net
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202007,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
                  URI:http://www.d-trust.net/crl/d-trust_root_class_3_ca_2007.crl

            X509v3 Subject Key Identifier: 
                4B:1D:57:71:44:03:3D:9F:16:F1:7A:4B:55:B1:91:D9:8A:0C:30:90
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: sha1WithRSAEncryption
         58:7c:58:a6:59:fb:53:90:75:b8:33:c4:38:be:02:94:8a:64:
         40:e6:2f:c3:6a:02:3e:b7:2c:86:4e:8a:9f:eb:70:d6:5e:08:
         05:4c:64:a3:83:7c:8e:ba:86:01:59:1e:3f:9f:fd:aa:80:d7:
         71:c1:a3:22:1f:67:8c:44:ec:9c:bb:65:bc:d2:cc:06:8f:b8:
         f7:f6:1c:dc:51:e0:a0:69:50:70:cf:68:a9:7c:9f:2a:cd:46:
         0e:37:70:07:ad:71:cb:bf:0c:db:45:16:6e:bc:16:c1:b0:c6:
         9a:d8:8a:52:42:10:9a:f6:48:4a:3d:70:1d:fc:4d:20:13:8b:
         61:9e:73:b3:d3:2a:11:4a:89:09:2b:f4:49:27:95:68:30:4b:
         9d:fc:28:a9:d1:7a:79:48:84:fa:da:bf:58:b5:0d:f4:af:ed:
         20:04:9a:58:d2:63:2f:78:74:ee:8e:29:fe:20:c8:d8:e9:d8:
         7e:1d:5f:91:1d:d5:c6:d2:dc:34:48:4d:03:87:92:a1:72:f5:
         c6:96:af:b5:42:8e:db:6b:33:fa:56:00:3b:19:55:45:a2:98:
         d5:5a:bf:01:9b:fc:8b:3c:28:0a:47:52:3d:b0:e4:b3:81:c5:
         43:1d:c9:6e:55:c8:e9:0e:f4:e1:51:ad:42:78:19:0a:c2:f3:
         22:8b:38:42

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIDCX1DMA0GCSqGSIb3DQEBBQUAMEsxCzAJBgNVBAYTAkRF
MRUwEwYDVQQKDAxELVRydXN0IEdtYkgxJTAjBgNVBAMMHEQtVFJVU1QgUm9vdCBD
bGFzcyAzIENBIDIwMDcwHhcNMDkxMDIyMDcxNjQ4WhcNMjIwNTE2MDUyMDQ3WjBR
MQswCQYDVQQGEwJERTEVMBMGA1UECgwMRC1UUlVTVCBHbWJIMSswKQYDVQQDDCJE
LVRSVVNUIEFkdmFuY2VkIENsYXNzIDMgQ0EgMSAyMDA5MIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA3B3lZCtiJ113a7999sFAVWz//mIVDXHMN8FiMNaq
luIi3JAWW9me+sc/OOycYBIEgTniua0/AsIKiPFc7pT6gDyooEHabA/jXrMiKIPa
547LrMOGcdyjC0eHJ5nA+hCGwN+0XVm/7yuWz47A7qApF1PuU0/mEzGcTxx4tjzb
gxKN8jgLWfUjOB7+aFG5p/viTkBBA/SPIiYOTBEeJJio9Yj2dfTQOvHfo0ytlz4u
yvDbGsUAyM77uC5kqs7BXUy1SMGeVXTuBXjCcJ5KmRYDLfZVXtt9ZST0WvO+6ACl
dvKGJ/1CeBcTzUobNiZbPokn7v1nPKm/hL455wtLEMCdgQIDAQABo4ICAzCCAf8w
HwYDVR0jBBgwFoAUgi82I0l4IELXsFJYoNZ0VBV4v6owOQYIKwYBBQUHAQEELTAr
MCkGCCsGAQUFBzABhh1odHRwOi8vdXNlcnMub2NzcC5kLXRydXN0Lm5ldDBdBgNV
HSAEVjBUMFIGCysGAQQBpTQCgUgBMEMwQQYIKwYBBQUHAgEWNWh0dHA6Ly93d3cu
ZC10cnVzdC5uZXQvcmVwb3NpdG9yeS9DUFNfQ2xhc3NfM18yXzEucGRmMDMGA1Ud
EQQsMCqBEGluZm9AZC10cnVzdC5uZXSGFmh0dHA6Ly93d3cuZC10cnVzdC5uZXQw
gckGA1UdHwSBwTCBvjCBu6CBuKCBtYZ2bGRhcDovL2RpcmVjdG9yeS5kLXRydXN0
Lm5ldC9DTj1ELVRSVVNUJTIwUm9vdCUyMENsYXNzJTIwMyUyMENBJTIwMjAwNyxP
PUQtVHJ1c3QlMjBHbWJILEM9REU/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlzdIY7
aHR0cDovL3d3dy5kLXRydXN0Lm5ldC9jcmwvZC10cnVzdF9yb290X2NsYXNzXzNf
Y2FfMjAwNy5jcmwwHQYDVR0OBBYEFEsdV3FEAz2fFvF6S1WxkdmKDDCQMA4GA1Ud
DwEB/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH/AgEAMA0GCSqGSIb3DQEBBQUAA4IB
AQBYfFimWftTkHW4M8Q4vgKUimRA5i/DagI+tyyGToqf63DWXggFTGSjg3yOuoYB
WR4/n/2qgNdxwaMiH2eMROycu2W80swGj7j39hzcUeCgaVBwz2ipfJ8qzUYON3AH
rXHLvwzbRRZuvBbBsMaa2IpSQhCa9khKPXAd/E0gE4thnnOz0yoRSokJK/RJJ5Vo
MEud/Cip0Xp5SIT62r9YtQ30r+0gBJpY0mMveHTujin+IMjY6dh+HV+RHdXG0tw0
SE0Dh5KhcvXGlq+1Qo7bazP6VgA7GVVFopjVWr8Bm/yLPCgKR1I9sOSzgcVDHclu
VcjpDvThUa1CeBkKwvMiizhC
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06