D-TRUST_TIM_Root_CA_1_2019.crt: CN=D-TRUST TIM Root CA 1 2019,O=D-Trust GmbH,C=DE (Root Certificate, Expiring 2034-12-31) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is root certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_TIM_Root_CA_1_2019.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_TIM_Root_CA_1_2019.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6e:fa:1a:10:d2:ef:8e:02:00:03:c3:ab:82:ee:a3
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST TIM Root CA 1 2019
        Validity
            Not Before: Oct 29 08:23:46 2019 GMT
            Not After : Dec 31 19:59:59 2034 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST TIM Root CA 1 2019
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:64:6b:96:32:09:76:3d:68:a7:77:72:7a:93:40:
                    d7:a7:c9:a5:75:68:21:53:2a:e0:c6:e0:d8:df:e0:
                    61:16:a5:f2:42:9f:3f:00:f9:b9:e2:4a:ac:c4:e2:
                    5b:70:e3:76:23:76:99:70:c5:88:41:aa:cc:65:86:
                    e5:b4:c5:80:3e:47:53:df:23:08:5e:cc:c9:4a:96:
                    c3:31:73:34:7f:86:f8:51:8e:ab:55:ec:ce:b5:c3:
                    71:c6:b4:6b:6e:7e:30
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                EF:2F:D2:42:F5:75:90:1C:D5:34:6C:2F:4D:FD:CE:F9:E8:99:43:1F
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4788.2.400.1
                  CPS: http://www.d-trust.net/internet/files/D-TRUST_Device_PKI_CPS.pdf

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_tim_root_ca_1_2019.crl

    Signature Algorithm: ecdsa-with-SHA384
         30:65:02:31:00:a2:7f:ea:0c:ac:34:5d:32:d2:72:05:2e:ed:
         07:55:8f:59:56:84:d2:81:ce:6e:95:c1:9c:23:d1:e6:d9:e3:
         7a:27:4c:c9:d6:8f:9c:fa:38:7c:08:32:55:2d:01:15:cf:02:
         30:2c:0b:41:ee:4d:c1:ba:71:da:cc:40:46:d3:53:db:45:a9:
         d0:92:7b:64:eb:1a:33:9a:fd:5f:f4:09:af:9f:84:1b:2b:62:
         9b:4c:6d:75:c9:77:5c:b3:10:42:55:5f:bc

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06