D-TRUST operates the root CA for CV certificates on behalf of gematik GmbH.

You can download the root CVC-CA certificates here along with the pertinent public keys.

The fingerprints were calculated with the SHA-1 algorithm, in each case via the certificate or key file, respectively.

We will be pleased to send you the fingerprints on paper by post. Please send us an e-mail with your postal address  (mailto:gematik [at]

Application procedure for second-level CVC-CA certificates

As soon as we receive your application, we will contact you to make an appointment.

The certificate will be generated at D-TRUST in Berlin. The data needed to generate the certificate must be brought to us in person on a USB stick as a PCKS#10 request. The applicant must appear for this appointment with a valid ID card or passport.

To create the PKCS#10 request, you can download here in a ZIP file a free Java tool and a PKCS#10 request (SHA-256) as an example. We do not assume any warranty for this tool.

If you have any question, please send an e-mail to: gematik [at] or call +49 (0) 30 25 98 - 0.