Example of X.509 Certificate Data Structure

Q

Can you show me an example of X.509 certificate data structure?

✍: FYIcenter.com

A

Here is an example of X.509 Version 3 certificate data structure:

Certificate:
   Data:
       Version: 3 (0x2)
       Serial Number: 1 (0x1)
       Signature Algorithm: md5WithRSAEncryption
       Issuer: C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc,
               OU=Certification Services Division,
               CN=Thawte Server CA/emailAddress=server-certs@thawte.com
       Validity
           Not Before: Aug  1 00:00:00 1996 GMT
           Not After : Dec 31 23:59:59 2020 GMT
       Subject: C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc,
                OU=Certification Services Division,
                CN=Thawte Server CA/emailAddress=server-certs@thawte.com
       Subject Public Key Info:
           Public Key Algorithm: rsaEncryption
           RSA Public Key: (1024 bit)
               Modulus (1024 bit):
                   00:d3:a4:50:6e:c8:ff:56:6b:e6:cf:5d:b6:ea:0c:
                   68:75:47:a2:aa:c2:da:84:25:fc:a8:f4:47:51:da:
                   85:b5:20:74:94:86:1e:0f:75:c9:e9:08:61:f5:06:
                   6d:30:6e:15:19:02:e9:52:c0:62:db:4d:99:9e:e2:
                   6a:0c:44:38:cd:fe:be:e3:64:09:70:c5:fe:b1:6b:
                   29:b6:2f:49:c8:3b:d4:27:04:25:10:97:2f:e7:90:
                   6d:c0:28:42:99:d7:4c:43:de:c3:f5:21:6d:54:9f:
                   5d:c3:58:e1:c0:e4:d9:5b:b0:b8:dc:b4:7b:df:36:
                   3a:c2:b5:66:22:12:d6:87:0d
               Exponent: 65537 (0x10001)
       X509v3 extensions:
           X509v3 Basic Constraints: critical
               CA:TRUE
   Signature Algorithm: md5WithRSAEncryption
       07:fa:4c:69:5c:fb:95:cc:46:ee:85:83:4d:21:30:8e:ca:d9:
       a8:6f:49:1a:e6:da:51:e3:60:70:6c:84:61:11:a1:1a:c8:48:
       3e:59:43:7d:4f:95:3d:a1:8b:b7:0b:62:98:7a:75:8a:dd:88:
       4e:4e:9e:40:db:a8:cc:32:74:b9:6f:0d:c6:e3:b3:44:0b:d9:
       8a:6f:9a:29:9b:99:18:28:3b:d1:e3:40:28:9a:5a:3c:d5:b5:
       e7:20:1b:8b:ca:a4:ab:8d:e9:51:d9:e2:4c:2c:59:a9:da:b9:
       b2:75:1b:f6:42:f2:ef:c7:f2:18:f9:89:bc:a3:ff:8a:23:2e:
       70:47

⇒ What Are Distinguished Names

⇐ What Is the Structure of Certificates

⇑ Terminologies on Basic Concepts

⇑⇑ "What Is" - Certificate Related Terminologies

2012-07-24, ∼6310🔥, 0💬

OpenSSL "verify -CAfile" - Specify Root CA Certificate
How to specify the root CA certificates that close the signing chain for the server certificate for OpenSSl "verify" command? I have downloaded the root CA certificate in a file. If you have the root CA certificate downloaded in a file, you can provide it to the OpenSSL "verify" command using the "-... 2012-07-24, ≈13🔥, 0💬

Download Root CA Certificate
How to download the certificate from a root CA? I need to the root CA certificate to close the certification validation chain. If you know the CN (Common Name) of the root CA, for example "DigiCert High Assurance EV Root CA", you can search and download it our certificate database at certificate.fyi... 2012-07-24, ≈12🔥, 0💬

What Is JKS (Java KeyStore) File
What is a JKS (Java KeyStore) file? I heard that it used to provide CA certificates to Java applications. A Java Keystore file is a specially formatted file used to store cryptographic keys and certificates. A Java KeyStore file can be used to store 3 types of entries: 1. PrivateKeyEntry - This type... 2012-07-24, ∼8214🔥, 0💬

What Are Certificate File Name Extensions
What are file name extensions used for certificates? I see .cer files on my Windows computer. Most commonly used file name extensions for X.509 certificates are: .cer - Used for certificate files in binary DER format. Could also be used for certificate files in text PEM format. .crt - Used for certi... 2012-07-25, ∼6883🔥, 0💬

Thawte SGC CA - G2, Thawte, Inc., US
Certificate summary - Owner: Thawte SGC CA - G2, "Thawte, Inc.", US Issuer: VeriSign Class 3 Public Primary Certification Authority - G5, "(c) 2006 VeriSign, Inc. - For authorized use only", VeriSign Trust Network, "VeriSign, Inc.", US Expiration: Tue Jul 28 19:59:59 EDT 2020 MD5: E0:08:48:A4:3C:BA:... 2012-07-20, ∼6644🔥, 0💬

Example of X.509 Certificate Data Structure
Can you show me an example of X.509 certificate data structure? Here is an example of X.509 Version 3 certificate data structure: Certificate: Data: Version: 3 (0x2) Serial Number: 1 (0x1) Signature Algorithm: md5WithRSAEncryption Issuer: C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, O... 2012-07-24, ∼6311🔥, 0💬

What Is the Structure of Certificates
What is the structure of certificates? What types of values are recorded in a certificate? The structure of an X.509 Version 3 certificate is defined in RFC 5280 - "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile". It contains the following values: ... 2012-07-24, ∼6023🔥, 0💬

What Are Distinguished Names
What are distinguished names on certificates? I see "CN=..." on in many certificates. Distinguished Names are used in X.509 certificates to identify entities, such as those used in the subject and issuer (signer) fields. The X.509 standard defines the following fields for Distinguished Names: CN - C... 2012-07-25, ∼5919🔥, 0💬

What Is PKI (Public-Key Infrastructure)
What is PKI (Public-Key Infrastructure)? Public-Key Infrastructure (PKI) is a public-key cryptography system that enables users to securely communicate on an insecure public network, and reliably verify the identity of a user via digital signatures. The main function of the a PKI system is for the c... 2012-07-25, ∼5298🔥, 0💬

All rights in the contents of this web site are reserved by the individual author. fyicenter.com does not guarantee the truthfulness, accuracy, or reliability of any contents.