D-Trust.HBA-qCA5.crt: CN=D-Trust.HBA-qCA5,OU=Qualifizierter VDA der Telematikinfrastruktur,2.5.4.97=NTRDE-HRB74346,O=D-Trust GmbH,C=DE (Intermediate Certificate, Expiring 2022-12-31) detail info and audit record

 

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Download certificate through curl:

curl -sSL "https://www.d-trust.net/cgi-bin/D-Trust.HBA-qCA5.crt" --output cert.crt

Download certificate through wget:

wget -q "https://www.d-trust.net/cgi-bin/D-Trust.HBA-qCA5.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:51:98:69:e8:b9:6b:93:51:6d:6b:e3:45:d6:8c:c6
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha256
         Mask Algorithm: mgf1 with sha256
          Salt Length: 0x20
         Trailer Field: 0xBC (default)
        Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST Root CA 3 2016/2.5.4.97=NTRDE-HRB74346
        Validity
            Not Before: Oct  8 12:43:00 2020 GMT
            Not After : Dec 31 19:59:59 2022 GMT
        Subject: C=DE, O=D-Trust GmbH/2.5.4.97=NTRDE-HRB74346, OU=Qualifizierter VDA der Telematikinfrastruktur, CN=D-Trust.HBA-qCA5
        Subject Public Key Info:
            Public Key Algorithm: rsassaPss
                RSA-PSS Public-Key: (2048 bit)
                Modulus:
                    00:a8:70:9d:42:e9:89:12:30:2c:c6:b3:5e:eb:d9:
                    88:ef:75:7f:1d:cc:72:10:0e:24:c6:1f:14:ca:5a:
                    8f:b9:e7:c3:50:23:77:e2:a5:d0:ab:b4:d5:6c:29:
                    47:64:10:dc:9f:4c:77:a4:e5:55:c2:7e:bf:1b:92:
                    b7:f0:34:0a:28:7e:82:39:52:f7:09:13:67:60:6f:
                    c3:2f:0f:f4:a8:73:61:de:4b:f2:b4:1e:3b:29:e8:
                    17:3a:8d:48:23:58:6f:8c:09:13:65:94:52:2b:39:
                    e8:0f:21:0a:b1:39:a0:9a:9e:c0:e4:5d:6b:ce:37:
                    a5:34:2f:fc:73:ac:98:8b:79:66:49:20:f6:3c:16:
                    17:1a:29:08:d2:2e:0a:3e:a4:e0:91:7d:7c:06:16:
                    21:60:bd:2d:c6:d1:23:9f:ff:fb:ae:90:d0:3f:09:
                    d0:4b:32:8f:0c:87:a2:8f:e2:93:85:d7:3c:5d:0b:
                    bc:28:7b:e0:22:f8:50:65:df:d8:2e:3c:a1:16:75:
                    28:8d:7f:05:69:e3:47:cc:88:68:67:bb:df:e1:41:
                    57:57:40:e3:19:80:d9:1d:d9:5f:c4:54:d1:5a:32:
                    2a:88:1c:85:05:4b:a1:45:4e:6c:34:b1:d8:52:4a:
                    73:3c:d7:90:ef:98:37:48:cc:42:13:91:5f:38:b8:
                    af:35
                Exponent: 65537 (0x10001)
                No PSS parameter restrictions
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DC:C0:12:BD:88:3D:63:13:8C:34:AB:DB:CE:8B:32:C4:11:4E:5D:E7

            Authority Information Access: 
                OCSP - URI:http://root-ca-3-2016.ocsp.d-trust.net
                CA Issuers - URI:http://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_3_2016.crt

            X509v3 Certificate Policies: 
                Policy: 0.4.0.194112.1.2
                Policy: 1.2.276.0.76.4.145
                Policy: 1.3.6.1.4.1.4788.2.211.1
                  CPS: http://www.d-trust.net/internet/files/D-TRUST_TSP-TI_CPS.pdf

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20CA%203%202016,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
                  URI:http://crl.d-trust.net/crl/d-trust_root_ca_3_2016.crl

            X509v3 Subject Key Identifier: 
                CF:B1:B1:8C:E1:2C:A5:4F:3D:46:53:91:13:2D:24:DF:33:72:08:17
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.4.1.8301.3.5: 
                0..
+.....m...
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: rsassaPss         
         Hash Algorithm: sha256
         Mask Algorithm: mgf1 with sha256
          Salt Length: 0x20
         Trailer Field: 0xBC (default)

         83:cf:40:ee:f6:13:f7:e0:61:c6:ec:cd:42:97:69:7c:d5:3b:
         eb:85:fd:7c:e7:70:33:ab:ad:77:ba:19:b0:4e:7c:d9:4f:33:
         5f:63:49:5d:30:7d:4b:e3:1e:42:98:a3:b6:05:15:36:02:84:
         fa:75:00:eb:ed:28:8c:51:69:4b:4c:8b:1f:03:15:4a:eb:3f:
         14:b5:49:e4:91:5c:a3:4f:3e:57:2d:59:31:a8:45:b9:27:79:
         a1:03:b8:7b:e1:5b:be:bc:cc:ca:42:5c:c5:ef:4c:bf:72:25:
         5c:2a:d0:2d:87:5d:b7:61:84:f1:4f:97:30:9d:3b:13:45:a1:
         af:f6:56:a2:c4:fa:dd:98:9a:30:62:6e:4a:44:05:4b:55:4a:
         8b:de:eb:b7:d9:f4:74:51:c7:53:f1:29:43:aa:e2:2d:0e:44:
         46:b8:40:6d:7b:11:94:c1:df:ea:2c:08:de:a2:9f:2d:4e:ea:
         57:4f:be:21:f2:ec:aa:eb:39:2f:3d:31:ed:8f:64:a1:ed:4b:
         3f:e5:5d:d9:fc:bb:8e:ca:ab:56:64:94:da:ba:66:27:d6:44:
         d2:c2:28:c3:27:26:a3:1c:c4:cf:ec:50:b2:65:1a:96:e1:43:
         65:06:9a:c8:8b:78:9d:12:f5:06:bf:d6:66:47:cf:fd:d5:9a:
         7e:3e:97:02:e7:08:f0:77:00:24:1e:17:f5:c0:7a:c3:77:9c:
         b3:63:78:a6:d5:3c:7f:d7:d6:05:92:52:86:b3:1f:91:59:20:
         48:e5:cf:e1:b1:e1:f1:7d:58:fe:a7:55:78:cc:7a:86:ba:9f:
         24:de:88:ee:7c:dc:0e:ff:33:ca:57:17:8e:e7:a8:94:a4:a2:
         1f:bc:99:f8:99:f1:8d:6a:61:c5:a2:92:44:bc:1e:14:35:10:
         4e:62:49:e6:ca:04:ea:33:02:ac:8e:4d:e6:7d:1f:e9:20:c8:
         9b:ae:b9:c9:5b:87:74:29:b7:93:b3:61:fc:7e:35:64:ae:b1:
         84:83:ff:86:67:a4:65:13:8c:0e:5c:6d:dc:38:b7:f8:cc:48:
         36:7a:12:3d:a6:b0:be:c5:8a:2e:69:84:f0:8d:58:9b:62:a2:
         d9:1c:83:c2:81:33:82:47:f9:78:4d:16:e6:84:cf:2f:5c:13:
         1d:c8:cd:4d:85:dd:32:8b:a8:79:a4:aa:90:41:5a:d4:f6:76:
         a5:0e:84:c6:3b:95:a3:d1:40:1a:da:99:a2:29:84:7d:61:83:
         8a:de:50:fb:f7:42:df:30:3e:1e:a7:88:26:7d:aa:74:e7:03:
         ea:5b:2b:ab:79:59:6c:8b:e3:79:d3:8c:70:04:e1:3b:06:da:
         31:36:75:c5:8d:39:e6:23

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List


Page version: e13a7e3f2 2023-05-06