D-TRUST_Test_PU_CA_3-21-2_2021.crt: 2.5.4.97=NTRDE-HRB74346,CN=D-TRUST Test PU CA 3-21-2 2021,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2036-04-22) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_Test_PU_CA_3-21-2_2021.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_Test_PU_CA_3-21-2_2021.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:35:05:e5:9c:73:a6:34:15:6e:95:50:c8:1e:d8:8d
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Test PU CA 3 2021
        Validity
            Not Before: May  4 08:22:59 2021 GMT
            Not After : Apr 22 11:59:59 2036 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST Test PU CA 3-21-2 2021/2.5.4.97=NTRDE-HRB74346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:9f:7f:b8:4f:c6:64:8c:a5:9f:7b:72:35:7b:51:
                    16:1d:c8:ea:bc:8e:31:5f:6d:fc:14:6c:62:36:a0:
                    2c:35:35:b9:b1:ee:9b:b4:1b:dc:9f:66:4c:5c:ce:
                    05:d9:20:11:48:5b:66:95:e5:dd:09:b1:1a:a2:49:
                    49:ab:2b:b2:f4:ac:34:75:1b:f5:67:f0:cb:bc:bc:
                    d5:4e:c6:e9:57:af:da:34:a3:94:6e:cf:44:71:06:
                    64:18:b7:44:6c:63:7a:0d:67:71:17:56:ab:05:19:
                    5d:a1:80:0c:9c:6d:82:e0:f0:54:e0:7b:a9:31:fd:
                    86:f3:dd:8c:08:19:3f:72:01:8f:b5:e3:3d:85:45:
                    b4:32:d0:d0:3c:6e:3e:95:eb:9e:a8:02:1a:29:e1:
                    19:38:7e:1e:6f:e6:6e:51:4c:48:0a:16:76:13:c6:
                    54:55:02:0e:08:3a:78:54:56:db:cc:d7:4e:31:4b:
                    ad:92:ed:37:12:59:10:0b:ea:67:27:75:52:ff:4e:
                    3d:f6:55:ce:7d:41:4b:79:41:6a:68:5d:d6:1e:c6:
                    ca:69:0d:4a:c1:1f:42:14:d3:ae:bc:e6:15:7b:40:
                    1c:db:ad:51:b2:e9:31:25:2e:36:90:d6:28:7b:36:
                    fd:55:55:9d:d0:28:6c:11:96:42:e3:7f:44:8b:6b:
                    52:bb:73:b7:a8:47:72:72:43:05:9a:80:b9:b2:2c:
                    9b:7a:02:65:50:53:41:14:95:85:65:b5:3d:c8:7e:
                    ca:38:45:3e:42:26:91:e8:21:58:5e:b8:c3:00:fa:
                    81:39:1f:e7:f1:cf:fb:94:42:4e:fb:c5:3e:14:f2:
                    7c:e9:68:be:c5:c1:c3:7e:16:36:a7:e7:de:73:94:
                    d5:a6:34:84:e5:4d:48:86:78:d5:6c:86:28:7d:f1:
                    1f:c3:4f:8b:71:45:42:a9:80:1f:cd:f5:3c:7d:7e:
                    26:8a:93:ed:36:85:a7:23:c3:95:e9:a7:9a:23:b5:
                    25:85:d5:16:cb:95:af:b3:f2:48:6c:4e:82:6b:4a:
                    de:13:84:77:f3:06:6c:25:a8:50:07:70:42:e6:b3:
                    2a:5f:11:f9:79:41:8c:9b:7e:62:b9:dc:9c:c0:03:
                    a5:cb:4a:22:a5:b5:6c:80:5d:f9:24:13:b0:a3:b1:
                    35:99:9d:51:94:05:1e:15:4c:7b:77:ab:6b:7a:09:
                    3e:9b:42:43:02:7a:f3:93:d0:02:5e:58:a8:16:1e:
                    9f:46:52:f5:0b:6b:be:8f:0c:2d:5c:7c:8a:e5:cc:
                    2d:57:48:f5:22:33:7b:1a:42:b2:18:48:64:7e:2f:
                    be:74:ff:37:28:10:fc:b3:af:67:eb:1c:8e:87:e4:
                    10:32:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:46:A2:CA:82:91:57:EE:0F:47:DC:39:F7:95:D8:0E:5C:D4:F8:55:73

            Authority Information Access: 
                OCSP - URI:http://root-test-pu-ca-3-2021.ocsp.d-trust.net
                CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_Root_Test_PU_CA_3_2021.crt

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4788.2.2.2

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_test_pu_ca_3_2021.crl

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Test%20PU%20CA%203%202021,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

            X509v3 Subject Key Identifier: 
                DC:D1:6E:26:ED:AB:C5:9A:0D:81:68:1E:91:CB:4C:8E:80:19:C5:FB
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha512
         Mask Algorithm: mgf1 with sha512
          Salt Length: 0x40
         Trailer Field: 0xBC (default)

         66:57:6e:01:75:12:95:f8:ac:22:b5:a6:0b:89:cc:14:e3:c3:
         f2:54:32:4a:8e:88:75:a8:16:48:b8:83:3f:1b:a4:bb:90:ad:
         f5:a0:7c:be:ae:21:9b:01:51:3d:82:66:5c:f2:2a:b4:f4:f0:
         df:2f:f9:97:d5:23:48:a5:e6:7c:b4:07:8a:d5:51:b0:1c:7e:
         7d:92:d5:78:18:7e:82:bf:07:2b:e1:db:50:68:e3:70:1f:4c:
         98:2f:56:ea:e6:6a:8d:65:53:9e:84:8d:e0:70:55:fe:6b:c7:
         cb:ca:e7:9b:39:73:d1:d3:63:7f:18:bc:23:49:37:d2:50:16:
         94:14:f2:fe:0b:31:8c:f7:84:2c:5f:54:a2:b6:6d:c0:f2:95:
         58:16:96:2e:5a:47:62:72:0d:81:9f:09:70:d1:70:77:05:1f:
         a2:d2:94:9e:a1:93:ae:9b:f1:e9:39:36:2d:57:b2:c6:18:31:
         31:6c:a3:2b:cb:9e:22:8f:87:44:52:ed:d2:88:89:39:44:82:
         4f:7c:10:bf:76:7f:7a:f8:f4:37:e7:53:d3:6a:fc:a0:da:b4:
         34:93:65:94:71:0e:b6:3a:72:06:5c:31:56:c5:c3:0d:32:d9:
         66:32:ec:3b:40:d5:3a:9e:8c:8f:b0:b4:1a:b7:99:b0:2a:96:
         f8:00:28:c6:f5:cb:17:00:ba:3d:1e:c8:27:72:f7:df:0a:38:
         75:94:3e:dc:c7:d9:f2:be:cd:07:f7:27:21:bc:23:8e:b2:43:
         95:5e:37:47:aa:3d:2d:6c:09:a8:67:33:93:5f:57:37:9d:9f:
         eb:29:a3:32:64:bb:b9:e9:9f:6c:23:48:fb:cb:04:a4:b9:77:
         da:cc:dc:fc:6f:00:2d:6f:83:e9:95:42:11:22:5e:a1:67:d0:
         f5:da:28:f0:3a:c0:eb:77:8e:6d:e6:8d:43:6f:1f:2f:2a:57:
         f0:5a:c4:cc:e2:1c:d1:e8:e1:24:f7:e1:26:88:84:ed:b3:d7:
         b2:a7:25:b8:d5:a8:94:52:46:b4:f2:f8:e6:d0:78:29:70:15:
         2b:4d:67:19:ca:3b:f6:fe:65:68:71:09:da:6c:c5:2b:c8:92:
         79:54:a1:dc:54:72:7f:5c:f8:19:6a:75:9e:ab:b2:6b:7e:1b:
         d4:95:e9:63:89:5b:c3:3d:3f:6b:f3:74:6d:77:b6:64:92:ef:
         f0:70:43:a6:b7:6c:1f:89:94:13:58:64:e4:90:8f:c2:24:7c:
         52:a8:97:b1:c2:b8:d7:b6:1a:80:bf:fa:1c:54:bc:16:04:0e:
         3e:8d:8c:59:b5:f2:ce:ba:d2:67:b1:21:cc:ff:cf:d4:2c:85:
         2b:68:54:a4:a6:85:c7:a8

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----
MIIHlDCCBUygAwIBAgIQSjUF5ZxzpjQVbpVQyB7YjTA9BgkqhkiG9w0BAQowMKAN
MAsGCWCGSAFlAwQCA6EaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgOiAwIBQDBN
MQswCQYDVQQGEwJERTEVMBMGA1UEChMMRC1UcnVzdCBHbWJIMScwJQYDVQQDEx5E
LVRSVVNUIFJvb3QgVGVzdCBQVSBDQSAzIDIwMjEwHhcNMjEwNTA0MDgyMjU5WhcN
MzYwNDIyMTE1OTU5WjBmMQswCQYDVQQGEwJERTEVMBMGA1UEChMMRC1UcnVzdCBH
bWJIMScwJQYDVQQDEx5ELVRSVVNUIFRlc3QgUFUgQ0EgMy0yMS0yIDIwMjExFzAV
BgNVBGETDk5UUkRFLUhSQjc0MzQ2MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
CgKCAgEAn3+4T8ZkjKWfe3I1e1EWHcjqvI4xX238FGxiNqAsNTW5se6btBvcn2ZM
XM4F2SARSFtmleXdCbEaoklJqyuy9Kw0dRv1Z/DLvLzVTsbpV6/aNKOUbs9EcQZk
GLdEbGN6DWdxF1arBRldoYAMnG2C4PBU4HupMf2G892MCBk/cgGPteM9hUW0MtDQ
PG4+leueqAIaKeEZOH4eb+ZuUUxIChZ2E8ZUVQIOCDp4VFbbzNdOMUutku03ElkQ
C+pnJ3VS/0499lXOfUFLeUFqaF3WHsbKaQ1KwR9CFNOuvOYVe0Ac261RsukxJS42
kNYoezb9VVWd0ChsEZZC439Ei2tSu3O3qEdyckMFmoC5siybegJlUFNBFJWFZbU9
yH7KOEU+QiaR6CFYXrjDAPqBOR/n8c/7lEJO+8U+FPJ86Wi+xcHDfhY2p+fec5TV
pjSE5U1IhnjVbIYoffEfw0+LcUVCqYAfzfU8fX4mipPtNoWnI8OV6aeaI7UlhdUW
y5Wvs/JIbE6Ca0reE4R38wZsJahQB3BC5rMqXxH5eUGMm35iudycwAOly0oipbVs
gF35JBOwo7E1mZ1RlAUeFUx7d6tregk+m0JDAnrzk9ACXlioFh6fRlL1C2u+jwwt
XHyK5cwtV0j1IjN7GkKyGEhkfi++dP83KBD8s69n6xyOh+QQMsUCAwEAAaOCAfUw
ggHxMB8GA1UdIwQYMBaAFEaiyoKRV+4PR9w595XYDlzU+FVzMIGbBggrBgEFBQcB
AQSBjjCBizA6BggrBgEFBQcwAYYuaHR0cDovL3Jvb3QtdGVzdC1wdS1jYS0zLTIw
MjEub2NzcC5kLXRydXN0Lm5ldDBNBggrBgEFBQcwAoZBaHR0cDovL3d3dy5kLXRy
dXN0Lm5ldC9jZ2ktYmluL0QtVFJVU1RfUm9vdF9UZXN0X1BVX0NBXzNfMjAyMS5j
cnQwFwYDVR0gBBAwDjAMBgorBgEEAaU0AgICMIHTBgNVHR8EgcswgcgwQ6BBoD+G
PWh0dHA6Ly9jcmwuZC10cnVzdC5uZXQvY3JsL2QtdHJ1c3Rfcm9vdF90ZXN0X3B1
X2NhXzNfMjAyMS5jcmwwgYCgfqB8hnpsZGFwOi8vZGlyZWN0b3J5LmQtdHJ1c3Qu
bmV0L0NOPUQtVFJVU1QlMjBSb290JTIwVGVzdCUyMFBVJTIwQ0ElMjAzJTIwMjAy
MSxPPUQtVHJ1c3QlMjBHbWJILEM9REU/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlz
dDAdBgNVHQ4EFgQU3NFuJu2rxZoNgWgekctMjoAZxfswDgYDVR0PAQH/BAQDAgEG
MBIGA1UdEwEB/wQIMAYBAf8CAQAwPQYJKoZIhvcNAQEKMDCgDTALBglghkgBZQME
AgOhGjAYBgkqhkiG9w0BAQgwCwYJYIZIAWUDBAIDogMCAUADggIBAGZXbgF1EpX4
rCK1pguJzBTjw/JUMkqOiHWoFki4gz8bpLuQrfWgfL6uIZsBUT2CZlzyKrT08N8v
+ZfVI0il5ny0B4rVUbAcfn2S1XgYfoK/Byvh21Bo43AfTJgvVurmao1lU56EjeBw
Vf5rx8vK55s5c9HTY38YvCNJN9JQFpQU8v4LMYz3hCxfVKK2bcDylVgWli5aR2Jy
DYGfCXDRcHcFH6LSlJ6hk66b8ek5Ni1XssYYMTFsoyvLniKPh0RS7dKIiTlEgk98
EL92f3r49DfnU9Nq/KDatDSTZZRxDrY6cgZcMVbFww0y2WYy7DtA1TqejI+wtBq3
mbAqlvgAKMb1yxcAuj0eyCdy998KOHWUPtzH2fK+zQf3JyG8I46yQ5VeN0eqPS1s
CahnM5NfVzedn+spozJku7npn2wjSPvLBKS5d9rM3PxvAC1vg+mVQhEiXqFn0PXa
KPA6wOt3jm3mjUNvHy8qV/BaxMziHNHo4ST34SaIhO2z17KnJbjVqJRSRrTy+ObQ
eClwFStNZxnKO/b+ZWhxCdpsxSvIknlUodxUcn9c+BlqdZ6rsmt+G9SV6WOJW8M9
P2vzdG13tmSS7/BwQ6a3bB+JlBNYZOSQj8IkfFKol7HCuNe2GoC/+hxUvBYEDj6N
jFm18s660mexIcz/z9QshStoVKSmhceo
-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

Page version: e13a7e3f2 2023-05-06