Categories:
DH Keys (39)
DSA Keys (70)
EC Keys (345)
Firefox (32)
General (13)
Google Chrome (25)
Intermediate CA (152)
Java VM (20)
JDK Keytool (25)
Microsoft CertUtil (26)
Mozilla CertUtil (18)
OpenSSL (237)
Other (17)
Portecle (38)
Publishers (1953)
Revoked Certificates (30)
Root CA (87)
RSA Keys (1902)
Tools (47)
Tutorial (7)
What Is (21)
Windows (129)
Collections:
Other Resources:
Microsoft "certutil -hashfile..." - Certificate Hash Value
How to get the hash value (or thumbprint value) of a certificate? I have the certificate stored in DER (Distinguished Encoding Rules) format.
✍: FYIcenter.com
If you have a certificate saved in a certificate file in DER (binary) format, you can get the SHA1 hash value of the sertificate using you can use the Microsoft "certutil -hashfile input_file" command as shown in this tutorial:
C:\fyicenter>\windows\system32\certutil -hashf ile FYIcenter.der SHA1 hash of file FYIcenter.der: 32 c6 b7 33 0f 30 64 41 f9 16 95 0d d5 65 a7 30 9c 50 b9 c2 CertUtil: -hashfile command completed successfully.
You can compare it with the hash value reported by the "certutil -store" command on the same certificate in the certificate store. Both values should match:
C:\fyicenter>\windows\system32\certutil -store -user TestStore 0 TestStore ================ Certificate 0 ================ Serial Number: b3f33360411e2b8045cd75cf9588a23d Issuer: CN=FYIcenter Root CA NotBefore: 7/1/2012 2:34 PM NotAfter: 12/31/2039 6:59 PM Subject: CN=FYIcenter Root CA Signature matches Public Key Root Certificate: Subject matches Issuer Template: Cert Hash(sha1): 32 c6 b7 33 0f 30 64 41 f9 16 95 0d d5 65 a7 30 9c 50 b9 c2 Key Container = JoeSoft Unique container name: 7b90a71bfc56f2582e916a51aed6df9a_e4c0ab3c-2930-4330... Provider = Microsoft Strong Cryptographic Provider Private key is NOT exportable Signature test passed CertUtil: -store command completed successfully.
2013-04-25, 14585👍, 0💬
Popular Posts:
Certificate Summary: Subject: thawte Primary Root CA Issuer: thawte Primary Root CA Expiration: 2036...
What commands are supported in OpenSSL? Here is a complete list of commands supported in OpenSSL: ST...
How can I get a X.509 certificate file to play with OpenSSL commands "x509" command? If you have no ...
How to use the "keytool -gencert" command? I received a CSR (Certificate Signing Request) file and w...
How to convert a certificate file in DER (Distinguished Encoding Rules) format to PEM (Privacy Enhan...