OpenSSL CSR File Structure and Components
What is the OpenSSL CSR file structure and components?
By default, CSR (Certificate Signing Request) files generated by the OpenSSL "req" command follow these rules:
1. CSR files are stored in PEM (Privacy-enhanced mail) format, which uses DER (Distinguished Encoding Rules) standard to serialize data elements into a binary string, then uses Base64 to encode the binary string into a printable character string.
2. CSR data elements follow the "RFC5967 - PKCS #10: Certification Request Syntax Specification, Version 1.7" specification.
The RFC5867, or PKCS#10, specifies that a CSR should have 3 parts:
1. "certificationRequestInfo" - Provides information of the certification request, which contains:
2. "signatureAlgorithm" - Provides what algorithm was used to generate the digital signature of the "certificationRequestInfo".
3. "signature" - Provides the digital signature of the "certificationRequestInfo", signed by the private key of the subject. The signature can be verified by the public key included in the "certificationRequestInfo".
2018-01-19, 978👍, 1💬
How to see the signing chain of a server certificate in IE? I want to know the root CA who signs the...
What options are supported by the "keytool -exportcert" command? Java Keytool can be used to export ...
How can I use Microsoft "certutil -viewstore" command? What are command options supported by "certut...
What is "certmgr.exe" on Windows 7? What can I use it for? "certmgr.exe" is a Certificate Manager co...
What tool to use to manage cert8.db and key3.db files directly? I know cert8.db and key3.db are used...