D-TRUST_CA_2-2_2020.crt: 2.5.4.97=NTRDE-HRB74346,CN=D-TRUST CA 2-2 2020,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2032-02-01) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-TRUST_CA_2-2_2020.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-TRUST_CA_2-2_2020.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a8:aa:f8:dd:40:00:ba:eb:c2:2e:2f:f7:81:e5:34
    Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 2 2017/2.5.4.97=NTRDE-HRB74346
        Validity
            Not Before: Jun 17 08:36:12 2020 GMT
            Not After : Feb  1 08:38:21 2032 GMT
        Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST CA 2-2 2020/2.5.4.97=NTRDE-HRB74346
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                pub: 
                    04:43:61:e7:18:c7:07:ef:6c:d1:0c:5f:8a:81:49:
                    24:40:38:56:1c:81:8b:f9:0d:ac:d0:19:e5:f3:b3:
                    34:ff:c8:58:8a:3a:a5:60:23:6b:cc:b6:b0:4b:7d:
                    50:9b:6e:75:fc:e6:9a:3f:34:bb:89:7f:92:2c:f1:
                    69:71:a2:1e:c3:e5:63:14:cd:02:bd:c5:6b:84:bc:
                    c2:fd:47:c2:41:6f:45:20:ec:9e:7b:9b:8c:e8:90:
                    24:87:82:06:5b:c0:97
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:20:3C:E0:F3:6F:27:91:86:65:61:74:77:D6:81:09:B7:65:7C:AF:1F

            Authority Information Access: 
                OCSP - URI:http://root-ca-2-2017.ocsp.d-trust.net
                CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_2_2017.crt

            X509v3 Certificate Policies: 
                Policy: 0.4.0.194112.1.3
                Policy: 1.3.6.1.4.1.4788.2.150.2
                  CPS: http://www.d-trust.net/internet/files/D-TRUST_Root_PKI_CPS.pdf

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.d-trust.net/crl/d-trust_root_ca_2_2017.crl

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20CA%202%202017,O=D-Trust%20GmbH,C=DE?certificaterevocationlist

            X509v3 Subject Key Identifier: 
                EC:2A:CE:BE:FC:59:63:D0:16:B0:E4:B5:3D:F6:E3:E6:35:36:E7:FB
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: ecdsa-with-SHA384
         30:66:02:31:00:c0:31:6b:9f:66:87:d8:20:23:3e:78:33:03:
         3d:43:b5:38:0f:24:ee:c7:4b:00:42:d0:18:bc:46:dd:28:31:
         66:51:74:a5:8d:fd:8e:84:38:a1:b9:f3:a4:30:70:a9:d6:02:
         31:00:b4:64:e2:99:6a:ee:f1:e6:73:e7:9b:64:14:4f:f6:29:
         63:e5:f5:05:5a:40:77:a3:a0:7f:7a:0e:19:6b:d7:4c:72:6d:
         bf:b3:5c:23:71:7a:41:ee:d2:05:08:83:4e:19

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06