"keytool -printcertreq" Command Examples - Print CSR Info

Q

How to use the "keytool -printcertreq" command? I received a CSR (Certificate Signing Request) file and want to see the owner and public key information in the CSR file.

✍: FYIcenter.com

A

Here is an example of using "keytool -printcertreq" command to display owner and public key information stored in a CSR (Certificate Signing Request) file:

C:\Users\fyicenter>"\Program Files\java\jre7\bin\keytool" -printcertreq
-file 2nd_cert_req.csr

PKCS #10 Certificate Request (Version 1.0)
Subject: CN=jar.fyicenter.com
Public Key: X.509 format DSA key

Extension Request:

#1: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 72 5C D2 77 D4 D0 3A B9   33 B0 1B EE F8 2D 84 87  r\.w..:.3....-..
0010: 32 58 2B DB                                        2X+.
]
]

What the "keytool -printcertreq" command shown above did for you:

  • Open the CSR (Certificate Signing Request) file: 2nd_cert_req.csr.
  • Print out the "Subject", the owner, of the public key: "jar.fyicenter.com".
  • Print out the "KeyIdentifier" of the public key.

Note that the public key of "jar.fyicenter.com" uses the Digital Signature Algorithm (DSA).

2012-07-20, 11374👍, 0💬