How to use the "keytool -printcertreq" command? I received a CSR (Certificate Signing Request) file and want to see the owner and public key information in the CSR file.

Here is an example of using "keytool -printcertreq" command to display owner and public key information stored in a CSR (Certificate Signing Request) file:

C:\Users\fyicenter> keytool -printcertreq -file 2nd_cert_req.csr

PKCS #10 Certificate Request (Version 1.0)
Subject: CN=jar.fyicenter.com
Public Key: X.509 format DSA key

Extension Request:

#1: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 72 5C D2 77 D4 D0 3A B9   33 B0 1B EE F8 2D 84 87  r\.w..:.3....-..
0010: 32 58 2B DB                                        2X+.
]
]

What the "keytool -printcertreq" command shown above did for you:

• Open the CSR (Certificate Signing Request) file: 2nd_cert_req.csr.
• Print out the "Subject", the owner, of the public key: "jar.fyicenter.com".
• Print out the "KeyIdentifier" of the public key.

Note that the public key of "jar.fyicenter.com" uses the Digital Signature Algorithm (DSA).

⇒ Java "keytool -gencert" Command Options

⇐ Java "keytool -printcertreq" Command Options

⇑ Managing Certificate Requests with Java Keytool

⇑⇑ Java Keytool: Certificate Management Tool