Commit bce9c6b1 authored by Eric Roman's avatar Eric Roman Committed by Commit Bot

Pretty-print the OCSP response data and certificates in test files.

Bug: 649000
Change-Id: Iafa20e38efb6a83082c186d56902589ca310cb10
Reviewed-on: https://chromium-review.googlesource.com/680002
Commit-Queue: Eric Roman <eroman@chromium.org>
Reviewed-by: default avatarSteven Valdez <svaldez@chromium.org>
Cr-Commit-Position: refs/heads/master@{#504223}
parent 135012ca
...@@ -33,7 +33,7 @@ def Transform(file_data): ...@@ -33,7 +33,7 @@ def Transform(file_data):
# with the block, output it immediately before the block. # with the block, output it immediately before the block.
user_comment = GetUserComment(block.comment) user_comment = GetUserComment(block.comment)
if user_comment: if user_comment:
result += user_comment + '\n' result += user_comment
generated_comment = GenerateCommentForBlock(block.name, block.data) generated_comment = GenerateCommentForBlock(block.name, block.data)
result += generated_comment + '\n' result += generated_comment + '\n'
...@@ -45,7 +45,48 @@ def Transform(file_data): ...@@ -45,7 +45,48 @@ def Transform(file_data):
def GenerateCommentForBlock(block_name, block_data): def GenerateCommentForBlock(block_name, block_data):
"""Returns a string describing the ASN.1 structure of block_data""" """Returns a string describing |block_data|. The format of |block_data| is
inferred from |block_name|, and is pretty-printed accordingly. For
instance CERTIFICATE is understood to be an X.509 certificate and pretty
printed using OpenSSL's x509 command. If there is no specific pretty-printer
for the data type, it is annotated using "openssl asn1parse"."""
# Try to pretty printing as X.509 certificate.
if "CERTIFICATE" in block_name:
p = subprocess.Popen(["openssl", "x509", "-text", "-noout",
"-inform", "DER"],
stdin=subprocess.PIPE,
stdout=subprocess.PIPE,
stderr=subprocess.PIPE)
stdout_data, stderr_data = p.communicate(block_data)
# If pretty printing succeeded, return it.
if p.returncode == 0:
stdout_data = stdout_data.strip()
return '$ openssl x509 -text < [%s]\n%s' % (block_name, stdout_data)
# Try pretty printing as OCSP Response.
if block_name == "OCSP RESPONSE":
tmp_file_path = "tmp_ocsp.der"
WriteStringToFile(block_data, tmp_file_path)
p = subprocess.Popen(["openssl", "ocsp", "-resp_text", "-respin",
tmp_file_path],
stdin=subprocess.PIPE,
stdout=subprocess.PIPE,
stderr=subprocess.PIPE)
stdout_data, stderr_data = p.communicate(block_data)
os.remove(tmp_file_path)
# If pretty printing succeeded, return it.
if p.returncode == 0:
stdout_data = stdout_data.strip()
# May contain embedded CERTIFICATE pem blocks. Escape these since
# CERTIFICATE already has meanining in the test file.
stdout_data = stdout_data.replace("-----", "~~~~~")
return '$ openssl ocsp -resp_text -respin <([%s])\n%s' % (block_name,
stdout_data)
# Otherwise try pretty printing using asn1parse.
p = subprocess.Popen(['openssl', 'asn1parse', '-i', '-inform', 'DER'], p = subprocess.Popen(['openssl', 'asn1parse', '-i', '-inform', 'DER'],
stdout=subprocess.PIPE, stdin=subprocess.PIPE, stdout=subprocess.PIPE, stdin=subprocess.PIPE,
...@@ -74,7 +115,7 @@ def GetUserComment(comment): ...@@ -74,7 +115,7 @@ def GetUserComment(comment):
"""Removes any script-generated lines (everything after the $ openssl line)""" """Removes any script-generated lines (everything after the $ openssl line)"""
# Consider everything after "$ openssl" to be a generated comment. # Consider everything after "$ openssl" to be a generated comment.
comment = comment.split('$ openssl asn1parse -i', 1)[0] comment = comment.split('$ openssl', 1)[0]
if IsEntirelyWhiteSpace(comment): if IsEntirelyWhiteSpace(comment):
comment = '' comment = ''
return comment return comment
......
Has an invalid OCSP OID Has an invalid OCSP OID
$ openssl asn1parse -i < [OCSP RESPONSE] $ openssl asn1parse -i < [OCSP RESPONSE]
0:d=0 hl=4 l= 299 cons: SEQUENCE 0:d=0 hl=4 l= 299 cons: SEQUENCE
4:d=1 hl=2 l= 1 prim: ENUMERATED :00 4:d=1 hl=2 l= 1 prim: ENUMERATED :00
...@@ -38,37 +39,40 @@ Te3jmpRiF1lLOr74wKeYveBpj5hH6XYl0x+UU9fC21aiquNrGTiXM6e2RW5SaSxibpi22HUADBb ...@@ -38,37 +39,40 @@ Te3jmpRiF1lLOr74wKeYveBpj5hH6XYl0x+UU9fC21aiquNrGTiXM6e2RW5SaSxibpi22HUADBb
Ji4RB9Jk+qQyn1JhRRYlM4sKOW+gm Ji4RB9Jk+qQyn1JhRRYlM4sKOW+gm
-----END OCSP RESPONSE----- -----END OCSP RESPONSE-----
$ openssl asn1parse -i < [CA CERTIFICATE] $ openssl x509 -text < [CA CERTIFICATE]
0:d=0 hl=4 l= 412 cons: SEQUENCE Certificate:
4:d=1 hl=4 l= 261 cons: SEQUENCE Data:
8:d=2 hl=2 l= 3 cons: cont [ 0 ] Version: 3 (0x2)
10:d=3 hl=2 l= 1 prim: INTEGER :02 Serial Number: 0 (0x0)
13:d=2 hl=2 l= 1 prim: INTEGER :00 Signature Algorithm: sha1WithRSAEncryption
16:d=2 hl=2 l= 13 cons: SEQUENCE Issuer: CN=Test CA
18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption Validity
29:d=3 hl=2 l= 0 prim: NULL Not Before: Jan 1 00:00:00 2017 GMT
31:d=2 hl=2 l= 18 cons: SEQUENCE Not After : Jan 1 00:00:00 2018 GMT
33:d=3 hl=2 l= 16 cons: SET Subject: CN=Test CA
35:d=4 hl=2 l= 14 cons: SEQUENCE Subject Public Key Info:
37:d=5 hl=2 l= 3 prim: OBJECT :commonName Public Key Algorithm: rsaEncryption
42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Public-Key: (1024 bit)
51:d=2 hl=2 l= 34 cons: SEQUENCE Modulus:
53:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20170101000000Z 00:b8:25:2b:ee:59:9a:9d:bc:b4:48:ae:09:ce:0d:
70:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20180101000000Z ba:c5:83:57:03:92:fd:52:32:55:f5:e4:2e:a6:cf:
87:d=2 hl=2 l= 18 cons: SEQUENCE 9e:4b:c4:10:af:24:da:d5:dd:44:a8:d6:28:38:9c:
89:d=3 hl=2 l= 16 cons: SET a5:11:c9:0b:70:a1:b5:71:cf:a4:35:c2:6a:17:b1:
91:d=4 hl=2 l= 14 cons: SEQUENCE b5:c7:cf:74:83:ac:7a:d5:3b:12:66:74:f2:4b:15:
93:d=5 hl=2 l= 3 prim: OBJECT :commonName b0:c2:59:af:0c:78:2c:42:3c:3f:8b:83:b3:1d:9a:
98:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA c8:bc:ce:b0:c8:f2:1a:a8:0a:1c:bb:6e:6e:d4:c6:
107:d=2 hl=3 l= 159 cons: SEQUENCE 10:66:3c:a8:ec:e3:c4:63:40:f6:79:ec:8b:14:ff:
110:d=3 hl=2 l= 13 cons: SEQUENCE 85:9e:2d:1a:e7:e8:31:56:81
112:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption Exponent: 65537 (0x10001)
123:d=4 hl=2 l= 0 prim: NULL Signature Algorithm: sha1WithRSAEncryption
125:d=3 hl=3 l= 141 prim: BIT STRING 35:fe:ee:96:31:c7:3d:91:eb:22:53:1f:bf:cc:20:cc:aa:f4:
269:d=1 hl=2 l= 13 cons: SEQUENCE 04:92:3c:8b:50:06:ea:a1:cc:b7:c2:4a:d6:02:af:53:a7:a4:
271:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption 71:81:78:bc:95:f3:2d:46:c4:83:4c:d5:92:11:7c:c7:67:d3:
282:d=2 hl=2 l= 0 prim: NULL 47:f6:06:9f:1c:46:da:d6:20:72:47:c2:57:d7:fb:66:d3:35:
284:d=1 hl=3 l= 129 prim: BIT STRING 82:07:61:13:4e:4d:e6:0c:93:e6:f3:be:98:ff:e8:de:60:a7:
06:94:cd:bb:f5:6e:b3:4e:0b:d6:e9:2b:72:bd:6e:ae:86:23:
2d:44:33:c4:3b:a7:52:12:46:d2:76:95:06:3e:69:0f:72:60:
16:d6
-----BEGIN CA CERTIFICATE----- -----BEGIN CA CERTIFICATE-----
MIIBnDCCAQWgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI MIIBnDCCAQWgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI
wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQ wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQ
...@@ -80,37 +84,40 @@ F8x2fTR/YGnxxG2tYgckfCV9f7ZtM1ggdhE05N5gyT5vO+mP/o3mCnBpTNu/Vus04L1ukrcr1ur ...@@ -80,37 +84,40 @@ F8x2fTR/YGnxxG2tYgckfCV9f7ZtM1ggdhE05N5gyT5vO+mP/o3mCnBpTNu/Vus04L1ukrcr1ur
oYjLUQzxDunUhJG0naVBj5pD3JgFtY= oYjLUQzxDunUhJG0naVBj5pD3JgFtY=
-----END CA CERTIFICATE----- -----END CA CERTIFICATE-----
$ openssl asn1parse -i < [CERTIFICATE] $ openssl x509 -text < [CERTIFICATE]
0:d=0 hl=4 l= 414 cons: SEQUENCE Certificate:
4:d=1 hl=4 l= 263 cons: SEQUENCE Data:
8:d=2 hl=2 l= 3 cons: cont [ 0 ] Version: 3 (0x2)
10:d=3 hl=2 l= 1 prim: INTEGER :02 Serial Number: 3 (0x3)
13:d=2 hl=2 l= 1 prim: INTEGER :03 Signature Algorithm: sha1WithRSAEncryption
16:d=2 hl=2 l= 13 cons: SEQUENCE Issuer: CN=Test CA
18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption Validity
29:d=3 hl=2 l= 0 prim: NULL Not Before: Jan 1 00:00:00 2017 GMT
31:d=2 hl=2 l= 18 cons: SEQUENCE Not After : Jan 1 00:00:00 2018 GMT
33:d=3 hl=2 l= 16 cons: SET Subject: CN=Test Cert
35:d=4 hl=2 l= 14 cons: SEQUENCE Subject Public Key Info:
37:d=5 hl=2 l= 3 prim: OBJECT :commonName Public Key Algorithm: rsaEncryption
42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Public-Key: (1024 bit)
51:d=2 hl=2 l= 34 cons: SEQUENCE Modulus:
53:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20170101000000Z 00:d5:12:3f:22:6f:b0:e1:43:c5:93:b3:c3:5b:70:
70:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20180101000000Z 52:b2:8b:10:ec:11:c4:c4:aa:aa:43:92:c8:d0:f3:
87:d=2 hl=2 l= 20 cons: SEQUENCE 35:23:e3:76:2d:b4:ea:93:26:6f:6a:79:1c:64:51:
89:d=3 hl=2 l= 18 cons: SET d3:4d:21:4a:73:83:35:dc:a0:16:74:db:f0:b9:a5:
91:d=4 hl=2 l= 16 cons: SEQUENCE 46:35:8d:53:e8:7d:37:5b:4d:ad:a3:df:d6:ae:01:
93:d=5 hl=2 l= 3 prim: OBJECT :commonName 38:ad:16:09:6e:fd:65:ad:1c:4b:48:12:1e:48:a7:
98:d=5 hl=2 l= 9 prim: PRINTABLESTRING :Test Cert ff:5b:47:c4:c9:3b:74:85:63:1a:0a:06:b2:9f:b9:
109:d=2 hl=3 l= 159 cons: SEQUENCE cb:ad:dc:3f:24:8b:a4:a7:8a:13:15:45:89:24:c1:
112:d=3 hl=2 l= 13 cons: SEQUENCE a7:3b:c2:a2:c8:74:f1:3f:6f
114:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption Exponent: 65537 (0x10001)
125:d=4 hl=2 l= 0 prim: NULL Signature Algorithm: sha1WithRSAEncryption
127:d=3 hl=3 l= 141 prim: BIT STRING 04:21:70:de:14:92:27:13:e8:d2:b0:51:f0:af:34:75:0b:a7:
271:d=1 hl=2 l= 13 cons: SEQUENCE ff:84:cb:c6:96:30:80:01:f5:c1:3a:c6:81:ee:ba:89:60:33:
273:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption c3:e5:0f:43:cc:ac:81:8d:09:fb:25:e1:67:40:64:a3:ca:fd:
284:d=2 hl=2 l= 0 prim: NULL bd:9c:c4:73:e4:bc:4d:8e:e2:70:f1:17:ce:b4:ab:a0:b2:63:
286:d=1 hl=3 l= 129 prim: BIT STRING 72:25:27:ae:d5:8e:18:73:0d:dc:12:5a:32:1c:b7:da:cd:23:
5b:c8:87:58:08:3e:95:0c:fd:c8:48:a2:75:6e:79:f2:00:82:
6e:b5:cc:71:e3:79:ca:68:85:9b:1b:5c:52:bf:a2:5a:71:e3:
05:b5
-----BEGIN CERTIFICATE----- -----BEGIN CERTIFICATE-----
MIIBnjCCAQegAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI MIIBnjCCAQegAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI
wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBQxEjAQBgNVBAMTCVRlc3QgQ2VydDCBnz wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBQxEjAQBgNVBAMTCVRlc3QgQ2VydDCBnz
......
Has an invalid signature Has an invalid signature
$ openssl asn1parse -i < [OCSP RESPONSE]
0:d=0 hl=3 l= 170 cons: SEQUENCE $ openssl ocsp -resp_text -respin <([OCSP RESPONSE])
3:d=1 hl=2 l= 1 prim: ENUMERATED :00 OCSP Response Data:
6:d=1 hl=3 l= 164 cons: cont [ 0 ] OCSP Response Status: successful (0x0)
9:d=2 hl=3 l= 161 cons: SEQUENCE Response Type: Basic OCSP Response
12:d=3 hl=2 l= 9 prim: OBJECT :Basic OCSP Response Version: 1 (0x0)
23:d=3 hl=3 l= 147 prim: OCTET STRING Responder Id: CN = Test CA
0:d=0 hl=3 l= 144 cons: SEQUENCE Produced At: Mar 2 00:00:00 2017 GMT
3:d=1 hl=2 l= 120 cons: SEQUENCE Responses:
5:d=2 hl=2 l= 20 cons: cont [ 1 ] Certificate ID:
7:d=3 hl=2 l= 18 cons: SEQUENCE Hash Algorithm: sha1
9:d=4 hl=2 l= 16 cons: SET Issuer Name Hash: 02FF75DA24DE8ADD150FAB689DCCE6E6636D0901
11:d=5 hl=2 l= 14 cons: SEQUENCE Issuer Key Hash: 84E1BA52A25C543CA972491224BC8B1ECA8B9FF4
13:d=6 hl=2 l= 3 prim: OBJECT :commonName Serial Number: 03
18:d=6 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Cert Status: good
27:d=2 hl=2 l= 15 prim: GENERALIZEDTIME :20170302000000Z This Update: Mar 1 00:00:00 2017 GMT
44:d=2 hl=2 l= 79 cons: SEQUENCE
46:d=3 hl=2 l= 77 cons: SEQUENCE Signature Algorithm: sha1WithRSAEncryption
48:d=4 hl=2 l= 56 cons: SEQUENCE de:ad:be:ef
50:d=5 hl=2 l= 7 cons: SEQUENCE
52:d=6 hl=2 l= 5 prim: OBJECT :sha1
59:d=5 hl=2 l= 20 prim: OCTET STRING [HEX DUMP]:02FF75DA24DE8ADD150FAB689DCCE6E6636D0901
81:d=5 hl=2 l= 20 prim: OCTET STRING [HEX DUMP]:84E1BA52A25C543CA972491224BC8B1ECA8B9FF4
103:d=5 hl=2 l= 1 prim: INTEGER :03
106:d=4 hl=2 l= 0 prim: cont [ 0 ]
108:d=4 hl=2 l= 15 prim: GENERALIZEDTIME :20170301000000Z
125:d=1 hl=2 l= 13 cons: SEQUENCE
127:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption
138:d=2 hl=2 l= 0 prim: NULL
140:d=1 hl=2 l= 5 prim: BIT STRING
-----BEGIN OCSP RESPONSE----- -----BEGIN OCSP RESPONSE-----
MIGqCgEAoIGkMIGhBgkrBgEFBQcwAQEEgZMwgZAweKEUMBIxEDAOBgNVBAMTB1Rlc3QgQ0EYDzI MIGqCgEAoIGkMIGhBgkrBgEFBQcwAQEEgZMwgZAweKEUMBIxEDAOBgNVBAMTB1Rlc3QgQ0EYDzI
wMTcwMzAyMDAwMDAwWjBPME0wODAHBgUrDgMCGgQUAv912iTeit0VD6tonczm5mNtCQEEFIThul wMTcwMzAyMDAwMDAwWjBPME0wODAHBgUrDgMCGgQUAv912iTeit0VD6tonczm5mNtCQEEFIThul
...@@ -36,37 +25,40 @@ KiXFQ8qXJJEiS8ix7Ki5/0AgEDgAAYDzIwMTcwMzAxMDAwMDAwWjANBgkqhkiG9w0BAQUFAAMFA ...@@ -36,37 +25,40 @@ KiXFQ8qXJJEiS8ix7Ki5/0AgEDgAAYDzIwMTcwMzAxMDAwMDAwWjANBgkqhkiG9w0BAQUFAAMFA
N6tvu8= N6tvu8=
-----END OCSP RESPONSE----- -----END OCSP RESPONSE-----
$ openssl asn1parse -i < [CA CERTIFICATE] $ openssl x509 -text < [CA CERTIFICATE]
0:d=0 hl=4 l= 412 cons: SEQUENCE Certificate:
4:d=1 hl=4 l= 261 cons: SEQUENCE Data:
8:d=2 hl=2 l= 3 cons: cont [ 0 ] Version: 3 (0x2)
10:d=3 hl=2 l= 1 prim: INTEGER :02 Serial Number: 0 (0x0)
13:d=2 hl=2 l= 1 prim: INTEGER :00 Signature Algorithm: sha1WithRSAEncryption
16:d=2 hl=2 l= 13 cons: SEQUENCE Issuer: CN=Test CA
18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption Validity
29:d=3 hl=2 l= 0 prim: NULL Not Before: Jan 1 00:00:00 2017 GMT
31:d=2 hl=2 l= 18 cons: SEQUENCE Not After : Jan 1 00:00:00 2018 GMT
33:d=3 hl=2 l= 16 cons: SET Subject: CN=Test CA
35:d=4 hl=2 l= 14 cons: SEQUENCE Subject Public Key Info:
37:d=5 hl=2 l= 3 prim: OBJECT :commonName Public Key Algorithm: rsaEncryption
42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Public-Key: (1024 bit)
51:d=2 hl=2 l= 34 cons: SEQUENCE Modulus:
53:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20170101000000Z 00:b8:25:2b:ee:59:9a:9d:bc:b4:48:ae:09:ce:0d:
70:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20180101000000Z ba:c5:83:57:03:92:fd:52:32:55:f5:e4:2e:a6:cf:
87:d=2 hl=2 l= 18 cons: SEQUENCE 9e:4b:c4:10:af:24:da:d5:dd:44:a8:d6:28:38:9c:
89:d=3 hl=2 l= 16 cons: SET a5:11:c9:0b:70:a1:b5:71:cf:a4:35:c2:6a:17:b1:
91:d=4 hl=2 l= 14 cons: SEQUENCE b5:c7:cf:74:83:ac:7a:d5:3b:12:66:74:f2:4b:15:
93:d=5 hl=2 l= 3 prim: OBJECT :commonName b0:c2:59:af:0c:78:2c:42:3c:3f:8b:83:b3:1d:9a:
98:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA c8:bc:ce:b0:c8:f2:1a:a8:0a:1c:bb:6e:6e:d4:c6:
107:d=2 hl=3 l= 159 cons: SEQUENCE 10:66:3c:a8:ec:e3:c4:63:40:f6:79:ec:8b:14:ff:
110:d=3 hl=2 l= 13 cons: SEQUENCE 85:9e:2d:1a:e7:e8:31:56:81
112:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption Exponent: 65537 (0x10001)
123:d=4 hl=2 l= 0 prim: NULL Signature Algorithm: sha1WithRSAEncryption
125:d=3 hl=3 l= 141 prim: BIT STRING 35:fe:ee:96:31:c7:3d:91:eb:22:53:1f:bf:cc:20:cc:aa:f4:
269:d=1 hl=2 l= 13 cons: SEQUENCE 04:92:3c:8b:50:06:ea:a1:cc:b7:c2:4a:d6:02:af:53:a7:a4:
271:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption 71:81:78:bc:95:f3:2d:46:c4:83:4c:d5:92:11:7c:c7:67:d3:
282:d=2 hl=2 l= 0 prim: NULL 47:f6:06:9f:1c:46:da:d6:20:72:47:c2:57:d7:fb:66:d3:35:
284:d=1 hl=3 l= 129 prim: BIT STRING 82:07:61:13:4e:4d:e6:0c:93:e6:f3:be:98:ff:e8:de:60:a7:
06:94:cd:bb:f5:6e:b3:4e:0b:d6:e9:2b:72:bd:6e:ae:86:23:
2d:44:33:c4:3b:a7:52:12:46:d2:76:95:06:3e:69:0f:72:60:
16:d6
-----BEGIN CA CERTIFICATE----- -----BEGIN CA CERTIFICATE-----
MIIBnDCCAQWgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI MIIBnDCCAQWgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI
wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQ wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQ
...@@ -78,37 +70,40 @@ F8x2fTR/YGnxxG2tYgckfCV9f7ZtM1ggdhE05N5gyT5vO+mP/o3mCnBpTNu/Vus04L1ukrcr1ur ...@@ -78,37 +70,40 @@ F8x2fTR/YGnxxG2tYgckfCV9f7ZtM1ggdhE05N5gyT5vO+mP/o3mCnBpTNu/Vus04L1ukrcr1ur
oYjLUQzxDunUhJG0naVBj5pD3JgFtY= oYjLUQzxDunUhJG0naVBj5pD3JgFtY=
-----END CA CERTIFICATE----- -----END CA CERTIFICATE-----
$ openssl asn1parse -i < [CERTIFICATE] $ openssl x509 -text < [CERTIFICATE]
0:d=0 hl=4 l= 414 cons: SEQUENCE Certificate:
4:d=1 hl=4 l= 263 cons: SEQUENCE Data:
8:d=2 hl=2 l= 3 cons: cont [ 0 ] Version: 3 (0x2)
10:d=3 hl=2 l= 1 prim: INTEGER :02 Serial Number: 3 (0x3)
13:d=2 hl=2 l= 1 prim: INTEGER :03 Signature Algorithm: sha1WithRSAEncryption
16:d=2 hl=2 l= 13 cons: SEQUENCE Issuer: CN=Test CA
18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption Validity
29:d=3 hl=2 l= 0 prim: NULL Not Before: Jan 1 00:00:00 2017 GMT
31:d=2 hl=2 l= 18 cons: SEQUENCE Not After : Jan 1 00:00:00 2018 GMT
33:d=3 hl=2 l= 16 cons: SET Subject: CN=Test Cert
35:d=4 hl=2 l= 14 cons: SEQUENCE Subject Public Key Info:
37:d=5 hl=2 l= 3 prim: OBJECT :commonName Public Key Algorithm: rsaEncryption
42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Public-Key: (1024 bit)
51:d=2 hl=2 l= 34 cons: SEQUENCE Modulus:
53:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20170101000000Z 00:d5:12:3f:22:6f:b0:e1:43:c5:93:b3:c3:5b:70:
70:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20180101000000Z 52:b2:8b:10:ec:11:c4:c4:aa:aa:43:92:c8:d0:f3:
87:d=2 hl=2 l= 20 cons: SEQUENCE 35:23:e3:76:2d:b4:ea:93:26:6f:6a:79:1c:64:51:
89:d=3 hl=2 l= 18 cons: SET d3:4d:21:4a:73:83:35:dc:a0:16:74:db:f0:b9:a5:
91:d=4 hl=2 l= 16 cons: SEQUENCE 46:35:8d:53:e8:7d:37:5b:4d:ad:a3:df:d6:ae:01:
93:d=5 hl=2 l= 3 prim: OBJECT :commonName 38:ad:16:09:6e:fd:65:ad:1c:4b:48:12:1e:48:a7:
98:d=5 hl=2 l= 9 prim: PRINTABLESTRING :Test Cert ff:5b:47:c4:c9:3b:74:85:63:1a:0a:06:b2:9f:b9:
109:d=2 hl=3 l= 159 cons: SEQUENCE cb:ad:dc:3f:24:8b:a4:a7:8a:13:15:45:89:24:c1:
112:d=3 hl=2 l= 13 cons: SEQUENCE a7:3b:c2:a2:c8:74:f1:3f:6f
114:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption Exponent: 65537 (0x10001)
125:d=4 hl=2 l= 0 prim: NULL Signature Algorithm: sha1WithRSAEncryption
127:d=3 hl=3 l= 141 prim: BIT STRING 04:21:70:de:14:92:27:13:e8:d2:b0:51:f0:af:34:75:0b:a7:
271:d=1 hl=2 l= 13 cons: SEQUENCE ff:84:cb:c6:96:30:80:01:f5:c1:3a:c6:81:ee:ba:89:60:33:
273:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption c3:e5:0f:43:cc:ac:81:8d:09:fb:25:e1:67:40:64:a3:ca:fd:
284:d=2 hl=2 l= 0 prim: NULL bd:9c:c4:73:e4:bc:4d:8e:e2:70:f1:17:ce:b4:ab:a0:b2:63:
286:d=1 hl=3 l= 129 prim: BIT STRING 72:25:27:ae:d5:8e:18:73:0d:dc:12:5a:32:1c:b7:da:cd:23:
5b:c8:87:58:08:3e:95:0c:fd:c8:48:a2:75:6e:79:f2:00:82:
6e:b5:cc:71:e3:79:ca:68:85:9b:1b:5c:52:bf:a2:5a:71:e3:
05:b5
-----BEGIN CERTIFICATE----- -----BEGIN CERTIFICATE-----
MIIBnjCCAQegAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI MIIBnjCCAQegAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI
wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBQxEjAQBgNVBAMTCVRlc3QgQ2VydDCBnz wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBQxEjAQBgNVBAMTCVRlc3QgQ2VydDCBnz
......
Has an invalid status larger than the defined Status enumeration Has an invalid status larger than the defined Status enumeration
$ openssl asn1parse -i < [OCSP RESPONSE]
0:d=0 hl=2 l= 3 cons: SEQUENCE $ openssl ocsp -resp_text -respin <([OCSP RESPONSE])
2:d=1 hl=2 l= 1 prim: ENUMERATED :11 Responder Error: (UNKNOWN) (17)
-----BEGIN OCSP RESPONSE----- -----BEGIN OCSP RESPONSE-----
MAMKARE= MAMKARE=
-----END OCSP RESPONSE----- -----END OCSP RESPONSE-----
$ openssl asn1parse -i < [CA CERTIFICATE] $ openssl x509 -text < [CA CERTIFICATE]
0:d=0 hl=4 l= 412 cons: SEQUENCE Certificate:
4:d=1 hl=4 l= 261 cons: SEQUENCE Data:
8:d=2 hl=2 l= 3 cons: cont [ 0 ] Version: 3 (0x2)
10:d=3 hl=2 l= 1 prim: INTEGER :02 Serial Number: 0 (0x0)
13:d=2 hl=2 l= 1 prim: INTEGER :00 Signature Algorithm: sha1WithRSAEncryption
16:d=2 hl=2 l= 13 cons: SEQUENCE Issuer: CN=Test CA
18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption Validity
29:d=3 hl=2 l= 0 prim: NULL Not Before: Jan 1 00:00:00 2017 GMT
31:d=2 hl=2 l= 18 cons: SEQUENCE Not After : Jan 1 00:00:00 2018 GMT
33:d=3 hl=2 l= 16 cons: SET Subject: CN=Test CA
35:d=4 hl=2 l= 14 cons: SEQUENCE Subject Public Key Info:
37:d=5 hl=2 l= 3 prim: OBJECT :commonName Public Key Algorithm: rsaEncryption
42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Public-Key: (1024 bit)
51:d=2 hl=2 l= 34 cons: SEQUENCE Modulus:
53:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20170101000000Z 00:b8:25:2b:ee:59:9a:9d:bc:b4:48:ae:09:ce:0d:
70:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20180101000000Z ba:c5:83:57:03:92:fd:52:32:55:f5:e4:2e:a6:cf:
87:d=2 hl=2 l= 18 cons: SEQUENCE 9e:4b:c4:10:af:24:da:d5:dd:44:a8:d6:28:38:9c:
89:d=3 hl=2 l= 16 cons: SET a5:11:c9:0b:70:a1:b5:71:cf:a4:35:c2:6a:17:b1:
91:d=4 hl=2 l= 14 cons: SEQUENCE b5:c7:cf:74:83:ac:7a:d5:3b:12:66:74:f2:4b:15:
93:d=5 hl=2 l= 3 prim: OBJECT :commonName b0:c2:59:af:0c:78:2c:42:3c:3f:8b:83:b3:1d:9a:
98:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA c8:bc:ce:b0:c8:f2:1a:a8:0a:1c:bb:6e:6e:d4:c6:
107:d=2 hl=3 l= 159 cons: SEQUENCE 10:66:3c:a8:ec:e3:c4:63:40:f6:79:ec:8b:14:ff:
110:d=3 hl=2 l= 13 cons: SEQUENCE 85:9e:2d:1a:e7:e8:31:56:81
112:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption Exponent: 65537 (0x10001)
123:d=4 hl=2 l= 0 prim: NULL Signature Algorithm: sha1WithRSAEncryption
125:d=3 hl=3 l= 141 prim: BIT STRING 35:fe:ee:96:31:c7:3d:91:eb:22:53:1f:bf:cc:20:cc:aa:f4:
269:d=1 hl=2 l= 13 cons: SEQUENCE 04:92:3c:8b:50:06:ea:a1:cc:b7:c2:4a:d6:02:af:53:a7:a4:
271:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption 71:81:78:bc:95:f3:2d:46:c4:83:4c:d5:92:11:7c:c7:67:d3:
282:d=2 hl=2 l= 0 prim: NULL 47:f6:06:9f:1c:46:da:d6:20:72:47:c2:57:d7:fb:66:d3:35:
284:d=1 hl=3 l= 129 prim: BIT STRING 82:07:61:13:4e:4d:e6:0c:93:e6:f3:be:98:ff:e8:de:60:a7:
06:94:cd:bb:f5:6e:b3:4e:0b:d6:e9:2b:72:bd:6e:ae:86:23:
2d:44:33:c4:3b:a7:52:12:46:d2:76:95:06:3e:69:0f:72:60:
16:d6
-----BEGIN CA CERTIFICATE----- -----BEGIN CA CERTIFICATE-----
MIIBnDCCAQWgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI MIIBnDCCAQWgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI
wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQ wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQ
...@@ -48,37 +51,40 @@ F8x2fTR/YGnxxG2tYgckfCV9f7ZtM1ggdhE05N5gyT5vO+mP/o3mCnBpTNu/Vus04L1ukrcr1ur ...@@ -48,37 +51,40 @@ F8x2fTR/YGnxxG2tYgckfCV9f7ZtM1ggdhE05N5gyT5vO+mP/o3mCnBpTNu/Vus04L1ukrcr1ur
oYjLUQzxDunUhJG0naVBj5pD3JgFtY= oYjLUQzxDunUhJG0naVBj5pD3JgFtY=
-----END CA CERTIFICATE----- -----END CA CERTIFICATE-----
$ openssl asn1parse -i < [CERTIFICATE] $ openssl x509 -text < [CERTIFICATE]
0:d=0 hl=4 l= 414 cons: SEQUENCE Certificate:
4:d=1 hl=4 l= 263 cons: SEQUENCE Data:
8:d=2 hl=2 l= 3 cons: cont [ 0 ] Version: 3 (0x2)
10:d=3 hl=2 l= 1 prim: INTEGER :02 Serial Number: 3 (0x3)
13:d=2 hl=2 l= 1 prim: INTEGER :03 Signature Algorithm: sha1WithRSAEncryption
16:d=2 hl=2 l= 13 cons: SEQUENCE Issuer: CN=Test CA
18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption Validity
29:d=3 hl=2 l= 0 prim: NULL Not Before: Jan 1 00:00:00 2017 GMT
31:d=2 hl=2 l= 18 cons: SEQUENCE Not After : Jan 1 00:00:00 2018 GMT
33:d=3 hl=2 l= 16 cons: SET Subject: CN=Test Cert
35:d=4 hl=2 l= 14 cons: SEQUENCE Subject Public Key Info:
37:d=5 hl=2 l= 3 prim: OBJECT :commonName Public Key Algorithm: rsaEncryption
42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Public-Key: (1024 bit)
51:d=2 hl=2 l= 34 cons: SEQUENCE Modulus:
53:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20170101000000Z 00:d5:12:3f:22:6f:b0:e1:43:c5:93:b3:c3:5b:70:
70:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20180101000000Z 52:b2:8b:10:ec:11:c4:c4:aa:aa:43:92:c8:d0:f3:
87:d=2 hl=2 l= 20 cons: SEQUENCE 35:23:e3:76:2d:b4:ea:93:26:6f:6a:79:1c:64:51:
89:d=3 hl=2 l= 18 cons: SET d3:4d:21:4a:73:83:35:dc:a0:16:74:db:f0:b9:a5:
91:d=4 hl=2 l= 16 cons: SEQUENCE 46:35:8d:53:e8:7d:37:5b:4d:ad:a3:df:d6:ae:01:
93:d=5 hl=2 l= 3 prim: OBJECT :commonName 38:ad:16:09:6e:fd:65:ad:1c:4b:48:12:1e:48:a7:
98:d=5 hl=2 l= 9 prim: PRINTABLESTRING :Test Cert ff:5b:47:c4:c9:3b:74:85:63:1a:0a:06:b2:9f:b9:
109:d=2 hl=3 l= 159 cons: SEQUENCE cb:ad:dc:3f:24:8b:a4:a7:8a:13:15:45:89:24:c1:
112:d=3 hl=2 l= 13 cons: SEQUENCE a7:3b:c2:a2:c8:74:f1:3f:6f
114:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption Exponent: 65537 (0x10001)
125:d=4 hl=2 l= 0 prim: NULL Signature Algorithm: sha1WithRSAEncryption
127:d=3 hl=3 l= 141 prim: BIT STRING 04:21:70:de:14:92:27:13:e8:d2:b0:51:f0:af:34:75:0b:a7:
271:d=1 hl=2 l= 13 cons: SEQUENCE ff:84:cb:c6:96:30:80:01:f5:c1:3a:c6:81:ee:ba:89:60:33:
273:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption c3:e5:0f:43:cc:ac:81:8d:09:fb:25:e1:67:40:64:a3:ca:fd:
284:d=2 hl=2 l= 0 prim: NULL bd:9c:c4:73:e4:bc:4d:8e:e2:70:f1:17:ce:b4:ab:a0:b2:63:
286:d=1 hl=3 l= 129 prim: BIT STRING 72:25:27:ae:d5:8e:18:73:0d:dc:12:5a:32:1c:b7:da:cd:23:
5b:c8:87:58:08:3e:95:0c:fd:c8:48:a2:75:6e:79:f2:00:82:
6e:b5:cc:71:e3:79:ca:68:85:9b:1b:5c:52:bf:a2:5a:71:e3:
05:b5
-----BEGIN CERTIFICATE----- -----BEGIN CERTIFICATE-----
MIIBnjCCAQegAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI MIIBnjCCAQegAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI
wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBQxEjAQBgNVBAMTCVRlc3QgQ2VydDCBnz wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBQxEjAQBgNVBAMTCVRlc3QgQ2VydDCBnz
......
This diff is collapsed.
Includes an x509v3 extension Includes an x509v3 extension
$ openssl asn1parse -i < [OCSP RESPONSE] $ openssl asn1parse -i < [OCSP RESPONSE]
0:d=0 hl=4 l= 319 cons: SEQUENCE 0:d=0 hl=4 l= 319 cons: SEQUENCE
4:d=1 hl=2 l= 1 prim: ENUMERATED :00 4:d=1 hl=2 l= 1 prim: ENUMERATED :00
...@@ -39,37 +40,40 @@ oMel2u3CqMbH/HsC2hMnbQuOPI4tcLzlIomNbqyC/8xBeCLB7FElNbXgBG9wxQmErN5uLjipjdw ...@@ -39,37 +40,40 @@ oMel2u3CqMbH/HsC2hMnbQuOPI4tcLzlIomNbqyC/8xBeCLB7FElNbXgBG9wxQmErN5uLjipjdw
WPujw2XXczLjRSEHoSE70T/l5B7pP4u9BmUfiesJ3GTQPMd4DPLpYdJw= WPujw2XXczLjRSEHoSE70T/l5B7pP4u9BmUfiesJ3GTQPMd4DPLpYdJw=
-----END OCSP RESPONSE----- -----END OCSP RESPONSE-----
$ openssl asn1parse -i < [CA CERTIFICATE] $ openssl x509 -text < [CA CERTIFICATE]
0:d=0 hl=4 l= 412 cons: SEQUENCE Certificate:
4:d=1 hl=4 l= 261 cons: SEQUENCE Data:
8:d=2 hl=2 l= 3 cons: cont [ 0 ] Version: 3 (0x2)
10:d=3 hl=2 l= 1 prim: INTEGER :02 Serial Number: 0 (0x0)
13:d=2 hl=2 l= 1 prim: INTEGER :00 Signature Algorithm: sha1WithRSAEncryption
16:d=2 hl=2 l= 13 cons: SEQUENCE Issuer: CN=Test CA
18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption Validity
29:d=3 hl=2 l= 0 prim: NULL Not Before: Jan 1 00:00:00 2017 GMT
31:d=2 hl=2 l= 18 cons: SEQUENCE Not After : Jan 1 00:00:00 2018 GMT
33:d=3 hl=2 l= 16 cons: SET Subject: CN=Test CA
35:d=4 hl=2 l= 14 cons: SEQUENCE Subject Public Key Info:
37:d=5 hl=2 l= 3 prim: OBJECT :commonName Public Key Algorithm: rsaEncryption
42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Public-Key: (1024 bit)
51:d=2 hl=2 l= 34 cons: SEQUENCE Modulus:
53:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20170101000000Z 00:b8:25:2b:ee:59:9a:9d:bc:b4:48:ae:09:ce:0d:
70:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20180101000000Z ba:c5:83:57:03:92:fd:52:32:55:f5:e4:2e:a6:cf:
87:d=2 hl=2 l= 18 cons: SEQUENCE 9e:4b:c4:10:af:24:da:d5:dd:44:a8:d6:28:38:9c:
89:d=3 hl=2 l= 16 cons: SET a5:11:c9:0b:70:a1:b5:71:cf:a4:35:c2:6a:17:b1:
91:d=4 hl=2 l= 14 cons: SEQUENCE b5:c7:cf:74:83:ac:7a:d5:3b:12:66:74:f2:4b:15:
93:d=5 hl=2 l= 3 prim: OBJECT :commonName b0:c2:59:af:0c:78:2c:42:3c:3f:8b:83:b3:1d:9a:
98:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA c8:bc:ce:b0:c8:f2:1a:a8:0a:1c:bb:6e:6e:d4:c6:
107:d=2 hl=3 l= 159 cons: SEQUENCE 10:66:3c:a8:ec:e3:c4:63:40:f6:79:ec:8b:14:ff:
110:d=3 hl=2 l= 13 cons: SEQUENCE 85:9e:2d:1a:e7:e8:31:56:81
112:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption Exponent: 65537 (0x10001)
123:d=4 hl=2 l= 0 prim: NULL Signature Algorithm: sha1WithRSAEncryption
125:d=3 hl=3 l= 141 prim: BIT STRING 35:fe:ee:96:31:c7:3d:91:eb:22:53:1f:bf:cc:20:cc:aa:f4:
269:d=1 hl=2 l= 13 cons: SEQUENCE 04:92:3c:8b:50:06:ea:a1:cc:b7:c2:4a:d6:02:af:53:a7:a4:
271:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption 71:81:78:bc:95:f3:2d:46:c4:83:4c:d5:92:11:7c:c7:67:d3:
282:d=2 hl=2 l= 0 prim: NULL 47:f6:06:9f:1c:46:da:d6:20:72:47:c2:57:d7:fb:66:d3:35:
284:d=1 hl=3 l= 129 prim: BIT STRING 82:07:61:13:4e:4d:e6:0c:93:e6:f3:be:98:ff:e8:de:60:a7:
06:94:cd:bb:f5:6e:b3:4e:0b:d6:e9:2b:72:bd:6e:ae:86:23:
2d:44:33:c4:3b:a7:52:12:46:d2:76:95:06:3e:69:0f:72:60:
16:d6
-----BEGIN CA CERTIFICATE----- -----BEGIN CA CERTIFICATE-----
MIIBnDCCAQWgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI MIIBnDCCAQWgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI
wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQ wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQ
...@@ -81,37 +85,40 @@ F8x2fTR/YGnxxG2tYgckfCV9f7ZtM1ggdhE05N5gyT5vO+mP/o3mCnBpTNu/Vus04L1ukrcr1ur ...@@ -81,37 +85,40 @@ F8x2fTR/YGnxxG2tYgckfCV9f7ZtM1ggdhE05N5gyT5vO+mP/o3mCnBpTNu/Vus04L1ukrcr1ur
oYjLUQzxDunUhJG0naVBj5pD3JgFtY= oYjLUQzxDunUhJG0naVBj5pD3JgFtY=
-----END CA CERTIFICATE----- -----END CA CERTIFICATE-----
$ openssl asn1parse -i < [CERTIFICATE] $ openssl x509 -text < [CERTIFICATE]
0:d=0 hl=4 l= 414 cons: SEQUENCE Certificate:
4:d=1 hl=4 l= 263 cons: SEQUENCE Data:
8:d=2 hl=2 l= 3 cons: cont [ 0 ] Version: 3 (0x2)
10:d=3 hl=2 l= 1 prim: INTEGER :02 Serial Number: 3 (0x3)
13:d=2 hl=2 l= 1 prim: INTEGER :03 Signature Algorithm: sha1WithRSAEncryption
16:d=2 hl=2 l= 13 cons: SEQUENCE Issuer: CN=Test CA
18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption Validity
29:d=3 hl=2 l= 0 prim: NULL Not Before: Jan 1 00:00:00 2017 GMT
31:d=2 hl=2 l= 18 cons: SEQUENCE Not After : Jan 1 00:00:00 2018 GMT
33:d=3 hl=2 l= 16 cons: SET Subject: CN=Test Cert
35:d=4 hl=2 l= 14 cons: SEQUENCE Subject Public Key Info:
37:d=5 hl=2 l= 3 prim: OBJECT :commonName Public Key Algorithm: rsaEncryption
42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Public-Key: (1024 bit)
51:d=2 hl=2 l= 34 cons: SEQUENCE Modulus:
53:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20170101000000Z 00:d5:12:3f:22:6f:b0:e1:43:c5:93:b3:c3:5b:70:
70:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20180101000000Z 52:b2:8b:10:ec:11:c4:c4:aa:aa:43:92:c8:d0:f3:
87:d=2 hl=2 l= 20 cons: SEQUENCE 35:23:e3:76:2d:b4:ea:93:26:6f:6a:79:1c:64:51:
89:d=3 hl=2 l= 18 cons: SET d3:4d:21:4a:73:83:35:dc:a0:16:74:db:f0:b9:a5:
91:d=4 hl=2 l= 16 cons: SEQUENCE 46:35:8d:53:e8:7d:37:5b:4d:ad:a3:df:d6:ae:01:
93:d=5 hl=2 l= 3 prim: OBJECT :commonName 38:ad:16:09:6e:fd:65:ad:1c:4b:48:12:1e:48:a7:
98:d=5 hl=2 l= 9 prim: PRINTABLESTRING :Test Cert ff:5b:47:c4:c9:3b:74:85:63:1a:0a:06:b2:9f:b9:
109:d=2 hl=3 l= 159 cons: SEQUENCE cb:ad:dc:3f:24:8b:a4:a7:8a:13:15:45:89:24:c1:
112:d=3 hl=2 l= 13 cons: SEQUENCE a7:3b:c2:a2:c8:74:f1:3f:6f
114:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption Exponent: 65537 (0x10001)
125:d=4 hl=2 l= 0 prim: NULL Signature Algorithm: sha1WithRSAEncryption
127:d=3 hl=3 l= 141 prim: BIT STRING 04:21:70:de:14:92:27:13:e8:d2:b0:51:f0:af:34:75:0b:a7:
271:d=1 hl=2 l= 13 cons: SEQUENCE ff:84:cb:c6:96:30:80:01:f5:c1:3a:c6:81:ee:ba:89:60:33:
273:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption c3:e5:0f:43:cc:ac:81:8d:09:fb:25:e1:67:40:64:a3:ca:fd:
284:d=2 hl=2 l= 0 prim: NULL bd:9c:c4:73:e4:bc:4d:8e:e2:70:f1:17:ce:b4:ab:a0:b2:63:
286:d=1 hl=3 l= 129 prim: BIT STRING 72:25:27:ae:d5:8e:18:73:0d:dc:12:5a:32:1c:b7:da:cd:23:
5b:c8:87:58:08:3e:95:0c:fd:c8:48:a2:75:6e:79:f2:00:82:
6e:b5:cc:71:e3:79:ca:68:85:9b:1b:5c:52:bf:a2:5a:71:e3:
05:b5
-----BEGIN CERTIFICATE----- -----BEGIN CERTIFICATE-----
MIIBnjCCAQegAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI MIIBnjCCAQegAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI
wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBQxEjAQBgNVBAMTCVRlc3QgQ2VydDCBnz wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBQxEjAQBgNVBAMTCVRlc3QgQ2VydDCBnz
......
Has an extension in the SingleResponse Has an extension in the SingleResponse
$ openssl asn1parse -i < [OCSP RESPONSE] $ openssl asn1parse -i < [OCSP RESPONSE]
0:d=0 hl=4 l= 319 cons: SEQUENCE 0:d=0 hl=4 l= 319 cons: SEQUENCE
4:d=1 hl=2 l= 1 prim: ENUMERATED :00 4:d=1 hl=2 l= 1 prim: ENUMERATED :00
...@@ -39,37 +40,40 @@ EVBREJFRUYwDQYJKoZIhvcNAQEFBQADgYEAD6oq+q3t5FJ5OkCyunN7NSJqNlaKkM7J9i49lTRK ...@@ -39,37 +40,40 @@ EVBREJFRUYwDQYJKoZIhvcNAQEFBQADgYEAD6oq+q3t5FJ5OkCyunN7NSJqNlaKkM7J9i49lTRK
5qPtrJN+C+5H+lMfVHQakew0PNDnUk60hEyjLwXnErI32zpVtzTv1x14= 5qPtrJN+C+5H+lMfVHQakew0PNDnUk60hEyjLwXnErI32zpVtzTv1x14=
-----END OCSP RESPONSE----- -----END OCSP RESPONSE-----
$ openssl asn1parse -i < [CA CERTIFICATE] $ openssl x509 -text < [CA CERTIFICATE]
0:d=0 hl=4 l= 412 cons: SEQUENCE Certificate:
4:d=1 hl=4 l= 261 cons: SEQUENCE Data:
8:d=2 hl=2 l= 3 cons: cont [ 0 ] Version: 3 (0x2)
10:d=3 hl=2 l= 1 prim: INTEGER :02 Serial Number: 0 (0x0)
13:d=2 hl=2 l= 1 prim: INTEGER :00 Signature Algorithm: sha1WithRSAEncryption
16:d=2 hl=2 l= 13 cons: SEQUENCE Issuer: CN=Test CA
18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption Validity
29:d=3 hl=2 l= 0 prim: NULL Not Before: Jan 1 00:00:00 2017 GMT
31:d=2 hl=2 l= 18 cons: SEQUENCE Not After : Jan 1 00:00:00 2018 GMT
33:d=3 hl=2 l= 16 cons: SET Subject: CN=Test CA
35:d=4 hl=2 l= 14 cons: SEQUENCE Subject Public Key Info:
37:d=5 hl=2 l= 3 prim: OBJECT :commonName Public Key Algorithm: rsaEncryption
42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Public-Key: (1024 bit)
51:d=2 hl=2 l= 34 cons: SEQUENCE Modulus:
53:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20170101000000Z 00:b8:25:2b:ee:59:9a:9d:bc:b4:48:ae:09:ce:0d:
70:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20180101000000Z ba:c5:83:57:03:92:fd:52:32:55:f5:e4:2e:a6:cf:
87:d=2 hl=2 l= 18 cons: SEQUENCE 9e:4b:c4:10:af:24:da:d5:dd:44:a8:d6:28:38:9c:
89:d=3 hl=2 l= 16 cons: SET a5:11:c9:0b:70:a1:b5:71:cf:a4:35:c2:6a:17:b1:
91:d=4 hl=2 l= 14 cons: SEQUENCE b5:c7:cf:74:83:ac:7a:d5:3b:12:66:74:f2:4b:15:
93:d=5 hl=2 l= 3 prim: OBJECT :commonName b0:c2:59:af:0c:78:2c:42:3c:3f:8b:83:b3:1d:9a:
98:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA c8:bc:ce:b0:c8:f2:1a:a8:0a:1c:bb:6e:6e:d4:c6:
107:d=2 hl=3 l= 159 cons: SEQUENCE 10:66:3c:a8:ec:e3:c4:63:40:f6:79:ec:8b:14:ff:
110:d=3 hl=2 l= 13 cons: SEQUENCE 85:9e:2d:1a:e7:e8:31:56:81
112:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption Exponent: 65537 (0x10001)
123:d=4 hl=2 l= 0 prim: NULL Signature Algorithm: sha1WithRSAEncryption
125:d=3 hl=3 l= 141 prim: BIT STRING 35:fe:ee:96:31:c7:3d:91:eb:22:53:1f:bf:cc:20:cc:aa:f4:
269:d=1 hl=2 l= 13 cons: SEQUENCE 04:92:3c:8b:50:06:ea:a1:cc:b7:c2:4a:d6:02:af:53:a7:a4:
271:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption 71:81:78:bc:95:f3:2d:46:c4:83:4c:d5:92:11:7c:c7:67:d3:
282:d=2 hl=2 l= 0 prim: NULL 47:f6:06:9f:1c:46:da:d6:20:72:47:c2:57:d7:fb:66:d3:35:
284:d=1 hl=3 l= 129 prim: BIT STRING 82:07:61:13:4e:4d:e6:0c:93:e6:f3:be:98:ff:e8:de:60:a7:
06:94:cd:bb:f5:6e:b3:4e:0b:d6:e9:2b:72:bd:6e:ae:86:23:
2d:44:33:c4:3b:a7:52:12:46:d2:76:95:06:3e:69:0f:72:60:
16:d6
-----BEGIN CA CERTIFICATE----- -----BEGIN CA CERTIFICATE-----
MIIBnDCCAQWgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI MIIBnDCCAQWgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI
wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQ wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQ
...@@ -81,37 +85,40 @@ F8x2fTR/YGnxxG2tYgckfCV9f7ZtM1ggdhE05N5gyT5vO+mP/o3mCnBpTNu/Vus04L1ukrcr1ur ...@@ -81,37 +85,40 @@ F8x2fTR/YGnxxG2tYgckfCV9f7ZtM1ggdhE05N5gyT5vO+mP/o3mCnBpTNu/Vus04L1ukrcr1ur
oYjLUQzxDunUhJG0naVBj5pD3JgFtY= oYjLUQzxDunUhJG0naVBj5pD3JgFtY=
-----END CA CERTIFICATE----- -----END CA CERTIFICATE-----
$ openssl asn1parse -i < [CERTIFICATE] $ openssl x509 -text < [CERTIFICATE]
0:d=0 hl=4 l= 414 cons: SEQUENCE Certificate:
4:d=1 hl=4 l= 263 cons: SEQUENCE Data:
8:d=2 hl=2 l= 3 cons: cont [ 0 ] Version: 3 (0x2)
10:d=3 hl=2 l= 1 prim: INTEGER :02 Serial Number: 3 (0x3)
13:d=2 hl=2 l= 1 prim: INTEGER :03 Signature Algorithm: sha1WithRSAEncryption
16:d=2 hl=2 l= 13 cons: SEQUENCE Issuer: CN=Test CA
18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption Validity
29:d=3 hl=2 l= 0 prim: NULL Not Before: Jan 1 00:00:00 2017 GMT
31:d=2 hl=2 l= 18 cons: SEQUENCE Not After : Jan 1 00:00:00 2018 GMT
33:d=3 hl=2 l= 16 cons: SET Subject: CN=Test Cert
35:d=4 hl=2 l= 14 cons: SEQUENCE Subject Public Key Info:
37:d=5 hl=2 l= 3 prim: OBJECT :commonName Public Key Algorithm: rsaEncryption
42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Public-Key: (1024 bit)
51:d=2 hl=2 l= 34 cons: SEQUENCE Modulus:
53:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20170101000000Z 00:d5:12:3f:22:6f:b0:e1:43:c5:93:b3:c3:5b:70:
70:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20180101000000Z 52:b2:8b:10:ec:11:c4:c4:aa:aa:43:92:c8:d0:f3:
87:d=2 hl=2 l= 20 cons: SEQUENCE 35:23:e3:76:2d:b4:ea:93:26:6f:6a:79:1c:64:51:
89:d=3 hl=2 l= 18 cons: SET d3:4d:21:4a:73:83:35:dc:a0:16:74:db:f0:b9:a5:
91:d=4 hl=2 l= 16 cons: SEQUENCE 46:35:8d:53:e8:7d:37:5b:4d:ad:a3:df:d6:ae:01:
93:d=5 hl=2 l= 3 prim: OBJECT :commonName 38:ad:16:09:6e:fd:65:ad:1c:4b:48:12:1e:48:a7:
98:d=5 hl=2 l= 9 prim: PRINTABLESTRING :Test Cert ff:5b:47:c4:c9:3b:74:85:63:1a:0a:06:b2:9f:b9:
109:d=2 hl=3 l= 159 cons: SEQUENCE cb:ad:dc:3f:24:8b:a4:a7:8a:13:15:45:89:24:c1:
112:d=3 hl=2 l= 13 cons: SEQUENCE a7:3b:c2:a2:c8:74:f1:3f:6f
114:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption Exponent: 65537 (0x10001)
125:d=4 hl=2 l= 0 prim: NULL Signature Algorithm: sha1WithRSAEncryption
127:d=3 hl=3 l= 141 prim: BIT STRING 04:21:70:de:14:92:27:13:e8:d2:b0:51:f0:af:34:75:0b:a7:
271:d=1 hl=2 l= 13 cons: SEQUENCE ff:84:cb:c6:96:30:80:01:f5:c1:3a:c6:81:ee:ba:89:60:33:
273:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption c3:e5:0f:43:cc:ac:81:8d:09:fb:25:e1:67:40:64:a3:ca:fd:
284:d=2 hl=2 l= 0 prim: NULL bd:9c:c4:73:e4:bc:4d:8e:e2:70:f1:17:ce:b4:ab:a0:b2:63:
286:d=1 hl=3 l= 129 prim: BIT STRING 72:25:27:ae:d5:8e:18:73:0d:dc:12:5a:32:1c:b7:da:cd:23:
5b:c8:87:58:08:3e:95:0c:fd:c8:48:a2:75:6e:79:f2:00:82:
6e:b5:cc:71:e3:79:ca:68:85:9b:1b:5c:52:bf:a2:5a:71:e3:
05:b5
-----BEGIN CERTIFICATE----- -----BEGIN CERTIFICATE-----
MIIBnjCCAQegAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI MIIBnjCCAQegAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI
wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBQxEjAQBgNVBAMTCVRlc3QgQ2VydDCBnz wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBQxEjAQBgNVBAMTCVRlc3QgQ2VydDCBnz
......
This diff is collapsed.
Has a status of MALFORMED_REQUEST Has a status of MALFORMED_REQUEST
$ openssl asn1parse -i < [OCSP RESPONSE] $ openssl ocsp -resp_text -respin <([OCSP RESPONSE])
0:d=0 hl=2 l= 3 cons: SEQUENCE Responder Error: malformedrequest (1)
2:d=1 hl=2 l= 1 prim: ENUMERATED :01
-----BEGIN OCSP RESPONSE----- -----BEGIN OCSP RESPONSE-----
MAMKAQE= MAMKAQE=
-----END OCSP RESPONSE----- -----END OCSP RESPONSE-----
$ openssl asn1parse -i < [CA CERTIFICATE] $ openssl x509 -text < [CA CERTIFICATE]
0:d=0 hl=4 l= 412 cons: SEQUENCE Certificate:
4:d=1 hl=4 l= 261 cons: SEQUENCE Data:
8:d=2 hl=2 l= 3 cons: cont [ 0 ] Version: 3 (0x2)
10:d=3 hl=2 l= 1 prim: INTEGER :02 Serial Number: 0 (0x0)
13:d=2 hl=2 l= 1 prim: INTEGER :00 Signature Algorithm: sha1WithRSAEncryption
16:d=2 hl=2 l= 13 cons: SEQUENCE Issuer: CN=Test CA
18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption Validity
29:d=3 hl=2 l= 0 prim: NULL Not Before: Jan 1 00:00:00 2017 GMT
31:d=2 hl=2 l= 18 cons: SEQUENCE Not After : Jan 1 00:00:00 2018 GMT
33:d=3 hl=2 l= 16 cons: SET Subject: CN=Test CA
35:d=4 hl=2 l= 14 cons: SEQUENCE Subject Public Key Info:
37:d=5 hl=2 l= 3 prim: OBJECT :commonName Public Key Algorithm: rsaEncryption
42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Public-Key: (1024 bit)
51:d=2 hl=2 l= 34 cons: SEQUENCE Modulus:
53:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20170101000000Z 00:d4:aa:31:f4:1a:0d:9c:8d:de:4f:1b:34:72:2b:
70:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20180101000000Z 63:23:a4:87:4f:55:b2:b0:c0:cb:27:89:18:77:2e:
87:d=2 hl=2 l= 18 cons: SEQUENCE 0e:d3:11:90:3e:62:23:b5:ab:34:6d:5f:7a:34:56:
89:d=3 hl=2 l= 16 cons: SET dd:65:86:ed:07:c2:3b:73:fc:e9:7d:a8:64:ce:9b:
91:d=4 hl=2 l= 14 cons: SEQUENCE 8a:09:e1:ed:08:7d:04:5f:b1:cf:3d:fd:ff:37:35:
93:d=5 hl=2 l= 3 prim: OBJECT :commonName d3:c2:fe:02:ab:d8:f6:1f:a5:58:9e:4e:43:b4:e7:
98:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA 8d:f9:6c:4c:71:14:32:5d:86:1d:ea:1a:3d:34:ad:
107:d=2 hl=3 l= 159 cons: SEQUENCE b4:1a:a0:13:c0:7c:cb:8e:f2:f3:d1:ec:fd:5f:ad:
110:d=3 hl=2 l= 13 cons: SEQUENCE db:13:c9:2e:9c:3a:39:02:a3
112:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption Exponent: 65537 (0x10001)
123:d=4 hl=2 l= 0 prim: NULL Signature Algorithm: sha1WithRSAEncryption
125:d=3 hl=3 l= 141 prim: BIT STRING 5e:9b:eb:b0:e8:7d:c6:e8:24:e3:b3:8f:3f:cd:4e:80:3e:77:
269:d=1 hl=2 l= 13 cons: SEQUENCE 58:c5:60:bc:40:e0:16:e2:17:ce:81:fd:0f:19:36:56:c5:a3:
271:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption df:49:5f:b7:a1:4c:44:d0:3e:06:e2:42:57:b7:be:fd:b7:bb:
282:d=2 hl=2 l= 0 prim: NULL 31:79:db:eb:ed:a3:c5:66:36:45:cb:4b:ba:6c:8d:53:89:98:
284:d=1 hl=3 l= 129 prim: BIT STRING c5:e0:ee:48:ef:97:ce:4d:14:33:bf:24:61:29:b9:7d:4e:7e:
cf:14:cc:c9:fa:0b:9e:68:34:9c:34:79:08:36:e0:ed:4f:a1:
9a:ac:c2:73:d3:2c:67:0e:23:5e:e0:9f:7f:05:ed:9a:b0:e1:
b7:93
-----BEGIN CA CERTIFICATE----- -----BEGIN CA CERTIFICATE-----
MIIBnDCCAQWgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI MIIBnDCCAQWgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI
wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQ wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQ
...@@ -49,37 +51,40 @@ e+/be7MXnb6+2jxWY2RctLumyNU4mYxeDuSO+Xzk0UM78kYSm5fU5+zxTMyfoLnmg0nDR5CDbg7 ...@@ -49,37 +51,40 @@ e+/be7MXnb6+2jxWY2RctLumyNU4mYxeDuSO+Xzk0UM78kYSm5fU5+zxTMyfoLnmg0nDR5CDbg7
U+hmqzCc9MsZw4jXuCffwXtmrDht5M= U+hmqzCc9MsZw4jXuCffwXtmrDht5M=
-----END CA CERTIFICATE----- -----END CA CERTIFICATE-----
$ openssl asn1parse -i < [CERTIFICATE] $ openssl x509 -text < [CERTIFICATE]
0:d=0 hl=4 l= 414 cons: SEQUENCE Certificate:
4:d=1 hl=4 l= 263 cons: SEQUENCE Data:
8:d=2 hl=2 l= 3 cons: cont [ 0 ] Version: 3 (0x2)
10:d=3 hl=2 l= 1 prim: INTEGER :02 Serial Number: 3 (0x3)
13:d=2 hl=2 l= 1 prim: INTEGER :03 Signature Algorithm: sha1WithRSAEncryption
16:d=2 hl=2 l= 13 cons: SEQUENCE Issuer: CN=Test CA
18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption Validity
29:d=3 hl=2 l= 0 prim: NULL Not Before: Jan 1 00:00:00 2017 GMT
31:d=2 hl=2 l= 18 cons: SEQUENCE Not After : Jan 1 00:00:00 2018 GMT
33:d=3 hl=2 l= 16 cons: SET Subject: CN=Test Cert
35:d=4 hl=2 l= 14 cons: SEQUENCE Subject Public Key Info:
37:d=5 hl=2 l= 3 prim: OBJECT :commonName Public Key Algorithm: rsaEncryption
42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Public-Key: (1024 bit)
51:d=2 hl=2 l= 34 cons: SEQUENCE Modulus:
53:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20170101000000Z 00:ad:b1:4c:76:1c:d3:13:a5:62:e3:c9:2a:a0:18:
70:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20180101000000Z 88:8a:10:5b:37:0f:32:24:33:0b:db:9d:8c:96:e5:
87:d=2 hl=2 l= 20 cons: SEQUENCE 4d:c2:d5:ca:47:1f:19:a5:c8:27:b4:42:bf:fe:ad:
89:d=3 hl=2 l= 18 cons: SET 96:8e:a0:73:50:2e:f2:35:d7:d1:9f:ba:41:59:8b:
91:d=4 hl=2 l= 16 cons: SEQUENCE 83:3d:2c:ab:68:7f:73:df:18:f1:ff:f4:3b:9c:68:
93:d=5 hl=2 l= 3 prim: OBJECT :commonName d9:8a:f0:df:c0:97:5c:e8:43:5f:14:fd:59:52:c2:
98:d=5 hl=2 l= 9 prim: PRINTABLESTRING :Test Cert 91:62:5e:e9:e8:a8:22:07:b9:5b:b4:46:60:b4:ee:
109:d=2 hl=3 l= 159 cons: SEQUENCE 62:29:0e:df:35:4c:41:e0:5c:89:9e:9c:b3:d8:fb:
112:d=3 hl=2 l= 13 cons: SEQUENCE 6d:c3:02:61:31:a4:e8:86:af
114:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption Exponent: 65537 (0x10001)
125:d=4 hl=2 l= 0 prim: NULL Signature Algorithm: sha1WithRSAEncryption
127:d=3 hl=3 l= 141 prim: BIT STRING 90:f6:92:8b:41:fd:9e:29:8f:54:1e:c2:98:25:7e:19:ed:8e:
271:d=1 hl=2 l= 13 cons: SEQUENCE 9e:37:9a:ae:ce:83:5e:56:7e:48:be:75:d4:5c:61:ce:07:a7:
273:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption 0c:44:ed:ed:66:10:20:2e:ac:3e:93:2f:42:62:76:a1:07:eb:
284:d=2 hl=2 l= 0 prim: NULL 07:63:c3:e7:58:26:0b:67:72:31:d1:2c:b0:b5:fd:1b:ee:b5:
286:d=1 hl=3 l= 129 prim: BIT STRING d0:11:99:55:06:02:17:8c:e5:f7:46:12:56:26:3f:6b:46:58:
a6:c6:02:2f:b8:bc:8d:ca:bd:57:f3:ce:8e:a4:a6:ad:80:4e:
34:3f:3c:76:1e:d0:75:39:2c:2c:e7:fc:8b:83:d0:21:1d:04:
62:51
-----BEGIN CERTIFICATE----- -----BEGIN CERTIFICATE-----
MIIBnjCCAQegAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI MIIBnjCCAQegAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI
wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBQxEjAQBgNVBAMTCVRlc3QgQ2VydDCBnz wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBQxEjAQBgNVBAMTCVRlc3QgQ2VydDCBnz
......
Missing a response for the cert Missing a response for the cert
$ openssl asn1parse -i < [OCSP RESPONSE]
0:d=0 hl=3 l= 216 cons: SEQUENCE $ openssl ocsp -resp_text -respin <([OCSP RESPONSE])
3:d=1 hl=2 l= 1 prim: ENUMERATED :00 OCSP Response Data:
6:d=1 hl=3 l= 210 cons: cont [ 0 ] OCSP Response Status: successful (0x0)
9:d=2 hl=3 l= 207 cons: SEQUENCE Response Type: Basic OCSP Response
12:d=3 hl=2 l= 9 prim: OBJECT :Basic OCSP Response Version: 1 (0x0)
23:d=3 hl=3 l= 193 prim: OCTET STRING Responder Id: CN = Test CA
0:d=0 hl=3 l= 190 cons: SEQUENCE Produced At: Mar 2 00:00:00 2017 GMT
3:d=1 hl=2 l= 41 cons: SEQUENCE Responses:
5:d=2 hl=2 l= 20 cons: cont [ 1 ] Signature Algorithm: sha1WithRSAEncryption
7:d=3 hl=2 l= 18 cons: SEQUENCE 8a:e1:ee:17:c2:15:ba:18:ea:d2:61:9a:bc:fc:7c:06:c1:2a:
9:d=4 hl=2 l= 16 cons: SET b1:46:7f:1f:4d:59:e7:a2:44:ea:a9:3d:05:be:3b:28:ab:51:
11:d=5 hl=2 l= 14 cons: SEQUENCE c1:12:d7:66:b1:6a:68:16:82:2c:e8:70:7a:e4:71:90:67:fd:
13:d=6 hl=2 l= 3 prim: OBJECT :commonName 76:0b:87:17:12:5a:14:dc:81:2b:5c:96:c4:0a:3f:19:b5:07:
18:d=6 hl=2 l= 7 prim: PRINTABLESTRING :Test CA fa:b1:90:e3:3a:a8:05:01:68:03:4c:8e:2a:c0:4e:2a:30:66:
27:d=2 hl=2 l= 15 prim: GENERALIZEDTIME :20170302000000Z 55:5b:72:15:d0:86:df:7e:c8:17:a0:48:d4:b4:38:f3:95:53:
44:d=2 hl=2 l= 0 cons: SEQUENCE 8a:5e:c6:9d:dc:2a:46:59:dd:a8:c6:d6:9b:92:8d:fe:a2:a4:
46:d=1 hl=2 l= 13 cons: SEQUENCE 32:b4
48:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption
59:d=2 hl=2 l= 0 prim: NULL
61:d=1 hl=3 l= 129 prim: BIT STRING
-----BEGIN OCSP RESPONSE----- -----BEGIN OCSP RESPONSE-----
MIHYCgEAoIHSMIHPBgkrBgEFBQcwAQEEgcEwgb4wKaEUMBIxEDAOBgNVBAMTB1Rlc3QgQ0EYDzI MIHYCgEAoIHSMIHPBgkrBgEFBQcwAQEEgcEwgb4wKaEUMBIxEDAOBgNVBAMTB1Rlc3QgQ0EYDzI
wMTcwMzAyMDAwMDAwWjAAMA0GCSqGSIb3DQEBBQUAA4GBAIrh7hfCFboY6tJhmrz8fAbBKrFGfx wMTcwMzAyMDAwMDAwWjAAMA0GCSqGSIb3DQEBBQUAA4GBAIrh7hfCFboY6tJhmrz8fAbBKrFGfx
...@@ -27,37 +24,40 @@ wMTcwMzAyMDAwMDAwWjAAMA0GCSqGSIb3DQEBBQUAA4GBAIrh7hfCFboY6tJhmrz8fAbBKrFGfx ...@@ -27,37 +24,40 @@ wMTcwMzAyMDAwMDAwWjAAMA0GCSqGSIb3DQEBBQUAA4GBAIrh7hfCFboY6tJhmrz8fAbBKrFGfx
AUBaANMjirATiowZlVbchXQht9+yBegSNS0OPOVU4pexp3cKkZZ3ajG1puSjf6ipDK0 AUBaANMjirATiowZlVbchXQht9+yBegSNS0OPOVU4pexp3cKkZZ3ajG1puSjf6ipDK0
-----END OCSP RESPONSE----- -----END OCSP RESPONSE-----
$ openssl asn1parse -i < [CA CERTIFICATE] $ openssl x509 -text < [CA CERTIFICATE]
0:d=0 hl=4 l= 412 cons: SEQUENCE Certificate:
4:d=1 hl=4 l= 261 cons: SEQUENCE Data:
8:d=2 hl=2 l= 3 cons: cont [ 0 ] Version: 3 (0x2)
10:d=3 hl=2 l= 1 prim: INTEGER :02 Serial Number: 0 (0x0)
13:d=2 hl=2 l= 1 prim: INTEGER :00 Signature Algorithm: sha1WithRSAEncryption
16:d=2 hl=2 l= 13 cons: SEQUENCE Issuer: CN=Test CA
18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption Validity
29:d=3 hl=2 l= 0 prim: NULL Not Before: Jan 1 00:00:00 2017 GMT
31:d=2 hl=2 l= 18 cons: SEQUENCE Not After : Jan 1 00:00:00 2018 GMT
33:d=3 hl=2 l= 16 cons: SET Subject: CN=Test CA
35:d=4 hl=2 l= 14 cons: SEQUENCE Subject Public Key Info:
37:d=5 hl=2 l= 3 prim: OBJECT :commonName Public Key Algorithm: rsaEncryption
42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Public-Key: (1024 bit)
51:d=2 hl=2 l= 34 cons: SEQUENCE Modulus:
53:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20170101000000Z 00:b8:25:2b:ee:59:9a:9d:bc:b4:48:ae:09:ce:0d:
70:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20180101000000Z ba:c5:83:57:03:92:fd:52:32:55:f5:e4:2e:a6:cf:
87:d=2 hl=2 l= 18 cons: SEQUENCE 9e:4b:c4:10:af:24:da:d5:dd:44:a8:d6:28:38:9c:
89:d=3 hl=2 l= 16 cons: SET a5:11:c9:0b:70:a1:b5:71:cf:a4:35:c2:6a:17:b1:
91:d=4 hl=2 l= 14 cons: SEQUENCE b5:c7:cf:74:83:ac:7a:d5:3b:12:66:74:f2:4b:15:
93:d=5 hl=2 l= 3 prim: OBJECT :commonName b0:c2:59:af:0c:78:2c:42:3c:3f:8b:83:b3:1d:9a:
98:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA c8:bc:ce:b0:c8:f2:1a:a8:0a:1c:bb:6e:6e:d4:c6:
107:d=2 hl=3 l= 159 cons: SEQUENCE 10:66:3c:a8:ec:e3:c4:63:40:f6:79:ec:8b:14:ff:
110:d=3 hl=2 l= 13 cons: SEQUENCE 85:9e:2d:1a:e7:e8:31:56:81
112:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption Exponent: 65537 (0x10001)
123:d=4 hl=2 l= 0 prim: NULL Signature Algorithm: sha1WithRSAEncryption
125:d=3 hl=3 l= 141 prim: BIT STRING 35:fe:ee:96:31:c7:3d:91:eb:22:53:1f:bf:cc:20:cc:aa:f4:
269:d=1 hl=2 l= 13 cons: SEQUENCE 04:92:3c:8b:50:06:ea:a1:cc:b7:c2:4a:d6:02:af:53:a7:a4:
271:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption 71:81:78:bc:95:f3:2d:46:c4:83:4c:d5:92:11:7c:c7:67:d3:
282:d=2 hl=2 l= 0 prim: NULL 47:f6:06:9f:1c:46:da:d6:20:72:47:c2:57:d7:fb:66:d3:35:
284:d=1 hl=3 l= 129 prim: BIT STRING 82:07:61:13:4e:4d:e6:0c:93:e6:f3:be:98:ff:e8:de:60:a7:
06:94:cd:bb:f5:6e:b3:4e:0b:d6:e9:2b:72:bd:6e:ae:86:23:
2d:44:33:c4:3b:a7:52:12:46:d2:76:95:06:3e:69:0f:72:60:
16:d6
-----BEGIN CA CERTIFICATE----- -----BEGIN CA CERTIFICATE-----
MIIBnDCCAQWgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI MIIBnDCCAQWgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI
wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQ wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQ
...@@ -69,37 +69,40 @@ F8x2fTR/YGnxxG2tYgckfCV9f7ZtM1ggdhE05N5gyT5vO+mP/o3mCnBpTNu/Vus04L1ukrcr1ur ...@@ -69,37 +69,40 @@ F8x2fTR/YGnxxG2tYgckfCV9f7ZtM1ggdhE05N5gyT5vO+mP/o3mCnBpTNu/Vus04L1ukrcr1ur
oYjLUQzxDunUhJG0naVBj5pD3JgFtY= oYjLUQzxDunUhJG0naVBj5pD3JgFtY=
-----END CA CERTIFICATE----- -----END CA CERTIFICATE-----
$ openssl asn1parse -i < [CERTIFICATE] $ openssl x509 -text < [CERTIFICATE]
0:d=0 hl=4 l= 414 cons: SEQUENCE Certificate:
4:d=1 hl=4 l= 263 cons: SEQUENCE Data:
8:d=2 hl=2 l= 3 cons: cont [ 0 ] Version: 3 (0x2)
10:d=3 hl=2 l= 1 prim: INTEGER :02 Serial Number: 3 (0x3)
13:d=2 hl=2 l= 1 prim: INTEGER :03 Signature Algorithm: sha1WithRSAEncryption
16:d=2 hl=2 l= 13 cons: SEQUENCE Issuer: CN=Test CA
18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption Validity
29:d=3 hl=2 l= 0 prim: NULL Not Before: Jan 1 00:00:00 2017 GMT
31:d=2 hl=2 l= 18 cons: SEQUENCE Not After : Jan 1 00:00:00 2018 GMT
33:d=3 hl=2 l= 16 cons: SET Subject: CN=Test Cert
35:d=4 hl=2 l= 14 cons: SEQUENCE Subject Public Key Info:
37:d=5 hl=2 l= 3 prim: OBJECT :commonName Public Key Algorithm: rsaEncryption
42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Public-Key: (1024 bit)
51:d=2 hl=2 l= 34 cons: SEQUENCE Modulus:
53:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20170101000000Z 00:d5:12:3f:22:6f:b0:e1:43:c5:93:b3:c3:5b:70:
70:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20180101000000Z 52:b2:8b:10:ec:11:c4:c4:aa:aa:43:92:c8:d0:f3:
87:d=2 hl=2 l= 20 cons: SEQUENCE 35:23:e3:76:2d:b4:ea:93:26:6f:6a:79:1c:64:51:
89:d=3 hl=2 l= 18 cons: SET d3:4d:21:4a:73:83:35:dc:a0:16:74:db:f0:b9:a5:
91:d=4 hl=2 l= 16 cons: SEQUENCE 46:35:8d:53:e8:7d:37:5b:4d:ad:a3:df:d6:ae:01:
93:d=5 hl=2 l= 3 prim: OBJECT :commonName 38:ad:16:09:6e:fd:65:ad:1c:4b:48:12:1e:48:a7:
98:d=5 hl=2 l= 9 prim: PRINTABLESTRING :Test Cert ff:5b:47:c4:c9:3b:74:85:63:1a:0a:06:b2:9f:b9:
109:d=2 hl=3 l= 159 cons: SEQUENCE cb:ad:dc:3f:24:8b:a4:a7:8a:13:15:45:89:24:c1:
112:d=3 hl=2 l= 13 cons: SEQUENCE a7:3b:c2:a2:c8:74:f1:3f:6f
114:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption Exponent: 65537 (0x10001)
125:d=4 hl=2 l= 0 prim: NULL Signature Algorithm: sha1WithRSAEncryption
127:d=3 hl=3 l= 141 prim: BIT STRING 04:21:70:de:14:92:27:13:e8:d2:b0:51:f0:af:34:75:0b:a7:
271:d=1 hl=2 l= 13 cons: SEQUENCE ff:84:cb:c6:96:30:80:01:f5:c1:3a:c6:81:ee:ba:89:60:33:
273:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption c3:e5:0f:43:cc:ac:81:8d:09:fb:25:e1:67:40:64:a3:ca:fd:
284:d=2 hl=2 l= 0 prim: NULL bd:9c:c4:73:e4:bc:4d:8e:e2:70:f1:17:ce:b4:ab:a0:b2:63:
286:d=1 hl=3 l= 129 prim: BIT STRING 72:25:27:ae:d5:8e:18:73:0d:dc:12:5a:32:1c:b7:da:cd:23:
5b:c8:87:58:08:3e:95:0c:fd:c8:48:a2:75:6e:79:f2:00:82:
6e:b5:cc:71:e3:79:ca:68:85:9b:1b:5c:52:bf:a2:5a:71:e3:
05:b5
-----BEGIN CERTIFICATE----- -----BEGIN CERTIFICATE-----
MIIBnjCCAQegAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI MIIBnjCCAQegAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI
wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBQxEjAQBgNVBAMTCVRlc3QgQ2VydDCBnz wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBQxEjAQBgNVBAMTCVRlc3QgQ2VydDCBnz
......
No SingleResponses attached to the response No SingleResponses attached to the response
$ openssl asn1parse -i < [OCSP RESPONSE]
0:d=0 hl=3 l= 216 cons: SEQUENCE $ openssl ocsp -resp_text -respin <([OCSP RESPONSE])
3:d=1 hl=2 l= 1 prim: ENUMERATED :00 OCSP Response Data:
6:d=1 hl=3 l= 210 cons: cont [ 0 ] OCSP Response Status: successful (0x0)
9:d=2 hl=3 l= 207 cons: SEQUENCE Response Type: Basic OCSP Response
12:d=3 hl=2 l= 9 prim: OBJECT :Basic OCSP Response Version: 1 (0x0)
23:d=3 hl=3 l= 193 prim: OCTET STRING Responder Id: CN = Test CA
0:d=0 hl=3 l= 190 cons: SEQUENCE Produced At: Mar 2 00:00:00 2017 GMT
3:d=1 hl=2 l= 41 cons: SEQUENCE Responses:
5:d=2 hl=2 l= 20 cons: cont [ 1 ] Signature Algorithm: sha1WithRSAEncryption
7:d=3 hl=2 l= 18 cons: SEQUENCE 8a:e1:ee:17:c2:15:ba:18:ea:d2:61:9a:bc:fc:7c:06:c1:2a:
9:d=4 hl=2 l= 16 cons: SET b1:46:7f:1f:4d:59:e7:a2:44:ea:a9:3d:05:be:3b:28:ab:51:
11:d=5 hl=2 l= 14 cons: SEQUENCE c1:12:d7:66:b1:6a:68:16:82:2c:e8:70:7a:e4:71:90:67:fd:
13:d=6 hl=2 l= 3 prim: OBJECT :commonName 76:0b:87:17:12:5a:14:dc:81:2b:5c:96:c4:0a:3f:19:b5:07:
18:d=6 hl=2 l= 7 prim: PRINTABLESTRING :Test CA fa:b1:90:e3:3a:a8:05:01:68:03:4c:8e:2a:c0:4e:2a:30:66:
27:d=2 hl=2 l= 15 prim: GENERALIZEDTIME :20170302000000Z 55:5b:72:15:d0:86:df:7e:c8:17:a0:48:d4:b4:38:f3:95:53:
44:d=2 hl=2 l= 0 cons: SEQUENCE 8a:5e:c6:9d:dc:2a:46:59:dd:a8:c6:d6:9b:92:8d:fe:a2:a4:
46:d=1 hl=2 l= 13 cons: SEQUENCE 32:b4
48:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption
59:d=2 hl=2 l= 0 prim: NULL
61:d=1 hl=3 l= 129 prim: BIT STRING
-----BEGIN OCSP RESPONSE----- -----BEGIN OCSP RESPONSE-----
MIHYCgEAoIHSMIHPBgkrBgEFBQcwAQEEgcEwgb4wKaEUMBIxEDAOBgNVBAMTB1Rlc3QgQ0EYDzI MIHYCgEAoIHSMIHPBgkrBgEFBQcwAQEEgcEwgb4wKaEUMBIxEDAOBgNVBAMTB1Rlc3QgQ0EYDzI
wMTcwMzAyMDAwMDAwWjAAMA0GCSqGSIb3DQEBBQUAA4GBAIrh7hfCFboY6tJhmrz8fAbBKrFGfx wMTcwMzAyMDAwMDAwWjAAMA0GCSqGSIb3DQEBBQUAA4GBAIrh7hfCFboY6tJhmrz8fAbBKrFGfx
...@@ -27,37 +24,40 @@ wMTcwMzAyMDAwMDAwWjAAMA0GCSqGSIb3DQEBBQUAA4GBAIrh7hfCFboY6tJhmrz8fAbBKrFGfx ...@@ -27,37 +24,40 @@ wMTcwMzAyMDAwMDAwWjAAMA0GCSqGSIb3DQEBBQUAA4GBAIrh7hfCFboY6tJhmrz8fAbBKrFGfx
AUBaANMjirATiowZlVbchXQht9+yBegSNS0OPOVU4pexp3cKkZZ3ajG1puSjf6ipDK0 AUBaANMjirATiowZlVbchXQht9+yBegSNS0OPOVU4pexp3cKkZZ3ajG1puSjf6ipDK0
-----END OCSP RESPONSE----- -----END OCSP RESPONSE-----
$ openssl asn1parse -i < [CA CERTIFICATE] $ openssl x509 -text < [CA CERTIFICATE]
0:d=0 hl=4 l= 412 cons: SEQUENCE Certificate:
4:d=1 hl=4 l= 261 cons: SEQUENCE Data:
8:d=2 hl=2 l= 3 cons: cont [ 0 ] Version: 3 (0x2)
10:d=3 hl=2 l= 1 prim: INTEGER :02 Serial Number: 0 (0x0)
13:d=2 hl=2 l= 1 prim: INTEGER :00 Signature Algorithm: sha1WithRSAEncryption
16:d=2 hl=2 l= 13 cons: SEQUENCE Issuer: CN=Test CA
18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption Validity
29:d=3 hl=2 l= 0 prim: NULL Not Before: Jan 1 00:00:00 2017 GMT
31:d=2 hl=2 l= 18 cons: SEQUENCE Not After : Jan 1 00:00:00 2018 GMT
33:d=3 hl=2 l= 16 cons: SET Subject: CN=Test CA
35:d=4 hl=2 l= 14 cons: SEQUENCE Subject Public Key Info:
37:d=5 hl=2 l= 3 prim: OBJECT :commonName Public Key Algorithm: rsaEncryption
42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Public-Key: (1024 bit)
51:d=2 hl=2 l= 34 cons: SEQUENCE Modulus:
53:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20170101000000Z 00:b8:25:2b:ee:59:9a:9d:bc:b4:48:ae:09:ce:0d:
70:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20180101000000Z ba:c5:83:57:03:92:fd:52:32:55:f5:e4:2e:a6:cf:
87:d=2 hl=2 l= 18 cons: SEQUENCE 9e:4b:c4:10:af:24:da:d5:dd:44:a8:d6:28:38:9c:
89:d=3 hl=2 l= 16 cons: SET a5:11:c9:0b:70:a1:b5:71:cf:a4:35:c2:6a:17:b1:
91:d=4 hl=2 l= 14 cons: SEQUENCE b5:c7:cf:74:83:ac:7a:d5:3b:12:66:74:f2:4b:15:
93:d=5 hl=2 l= 3 prim: OBJECT :commonName b0:c2:59:af:0c:78:2c:42:3c:3f:8b:83:b3:1d:9a:
98:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA c8:bc:ce:b0:c8:f2:1a:a8:0a:1c:bb:6e:6e:d4:c6:
107:d=2 hl=3 l= 159 cons: SEQUENCE 10:66:3c:a8:ec:e3:c4:63:40:f6:79:ec:8b:14:ff:
110:d=3 hl=2 l= 13 cons: SEQUENCE 85:9e:2d:1a:e7:e8:31:56:81
112:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption Exponent: 65537 (0x10001)
123:d=4 hl=2 l= 0 prim: NULL Signature Algorithm: sha1WithRSAEncryption
125:d=3 hl=3 l= 141 prim: BIT STRING 35:fe:ee:96:31:c7:3d:91:eb:22:53:1f:bf:cc:20:cc:aa:f4:
269:d=1 hl=2 l= 13 cons: SEQUENCE 04:92:3c:8b:50:06:ea:a1:cc:b7:c2:4a:d6:02:af:53:a7:a4:
271:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption 71:81:78:bc:95:f3:2d:46:c4:83:4c:d5:92:11:7c:c7:67:d3:
282:d=2 hl=2 l= 0 prim: NULL 47:f6:06:9f:1c:46:da:d6:20:72:47:c2:57:d7:fb:66:d3:35:
284:d=1 hl=3 l= 129 prim: BIT STRING 82:07:61:13:4e:4d:e6:0c:93:e6:f3:be:98:ff:e8:de:60:a7:
06:94:cd:bb:f5:6e:b3:4e:0b:d6:e9:2b:72:bd:6e:ae:86:23:
2d:44:33:c4:3b:a7:52:12:46:d2:76:95:06:3e:69:0f:72:60:
16:d6
-----BEGIN CA CERTIFICATE----- -----BEGIN CA CERTIFICATE-----
MIIBnDCCAQWgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI MIIBnDCCAQWgAwIBAgIBADANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI
wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQ wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBIxEDAOBgNVBAMTB1Rlc3QgQ0EwgZ8wDQ
...@@ -69,37 +69,40 @@ F8x2fTR/YGnxxG2tYgckfCV9f7ZtM1ggdhE05N5gyT5vO+mP/o3mCnBpTNu/Vus04L1ukrcr1ur ...@@ -69,37 +69,40 @@ F8x2fTR/YGnxxG2tYgckfCV9f7ZtM1ggdhE05N5gyT5vO+mP/o3mCnBpTNu/Vus04L1ukrcr1ur
oYjLUQzxDunUhJG0naVBj5pD3JgFtY= oYjLUQzxDunUhJG0naVBj5pD3JgFtY=
-----END CA CERTIFICATE----- -----END CA CERTIFICATE-----
$ openssl asn1parse -i < [CERTIFICATE] $ openssl x509 -text < [CERTIFICATE]
0:d=0 hl=4 l= 414 cons: SEQUENCE Certificate:
4:d=1 hl=4 l= 263 cons: SEQUENCE Data:
8:d=2 hl=2 l= 3 cons: cont [ 0 ] Version: 3 (0x2)
10:d=3 hl=2 l= 1 prim: INTEGER :02 Serial Number: 3 (0x3)
13:d=2 hl=2 l= 1 prim: INTEGER :03 Signature Algorithm: sha1WithRSAEncryption
16:d=2 hl=2 l= 13 cons: SEQUENCE Issuer: CN=Test CA
18:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption Validity
29:d=3 hl=2 l= 0 prim: NULL Not Before: Jan 1 00:00:00 2017 GMT
31:d=2 hl=2 l= 18 cons: SEQUENCE Not After : Jan 1 00:00:00 2018 GMT
33:d=3 hl=2 l= 16 cons: SET Subject: CN=Test Cert
35:d=4 hl=2 l= 14 cons: SEQUENCE Subject Public Key Info:
37:d=5 hl=2 l= 3 prim: OBJECT :commonName Public Key Algorithm: rsaEncryption
42:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Test CA Public-Key: (1024 bit)
51:d=2 hl=2 l= 34 cons: SEQUENCE Modulus:
53:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20170101000000Z 00:d5:12:3f:22:6f:b0:e1:43:c5:93:b3:c3:5b:70:
70:d=3 hl=2 l= 15 prim: GENERALIZEDTIME :20180101000000Z 52:b2:8b:10:ec:11:c4:c4:aa:aa:43:92:c8:d0:f3:
87:d=2 hl=2 l= 20 cons: SEQUENCE 35:23:e3:76:2d:b4:ea:93:26:6f:6a:79:1c:64:51:
89:d=3 hl=2 l= 18 cons: SET d3:4d:21:4a:73:83:35:dc:a0:16:74:db:f0:b9:a5:
91:d=4 hl=2 l= 16 cons: SEQUENCE 46:35:8d:53:e8:7d:37:5b:4d:ad:a3:df:d6:ae:01:
93:d=5 hl=2 l= 3 prim: OBJECT :commonName 38:ad:16:09:6e:fd:65:ad:1c:4b:48:12:1e:48:a7:
98:d=5 hl=2 l= 9 prim: PRINTABLESTRING :Test Cert ff:5b:47:c4:c9:3b:74:85:63:1a:0a:06:b2:9f:b9:
109:d=2 hl=3 l= 159 cons: SEQUENCE cb:ad:dc:3f:24:8b:a4:a7:8a:13:15:45:89:24:c1:
112:d=3 hl=2 l= 13 cons: SEQUENCE a7:3b:c2:a2:c8:74:f1:3f:6f
114:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption Exponent: 65537 (0x10001)
125:d=4 hl=2 l= 0 prim: NULL Signature Algorithm: sha1WithRSAEncryption
127:d=3 hl=3 l= 141 prim: BIT STRING 04:21:70:de:14:92:27:13:e8:d2:b0:51:f0:af:34:75:0b:a7:
271:d=1 hl=2 l= 13 cons: SEQUENCE ff:84:cb:c6:96:30:80:01:f5:c1:3a:c6:81:ee:ba:89:60:33:
273:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption c3:e5:0f:43:cc:ac:81:8d:09:fb:25:e1:67:40:64:a3:ca:fd:
284:d=2 hl=2 l= 0 prim: NULL bd:9c:c4:73:e4:bc:4d:8e:e2:70:f1:17:ce:b4:ab:a0:b2:63:
286:d=1 hl=3 l= 129 prim: BIT STRING 72:25:27:ae:d5:8e:18:73:0d:dc:12:5a:32:1c:b7:da:cd:23:
5b:c8:87:58:08:3e:95:0c:fd:c8:48:a2:75:6e:79:f2:00:82:
6e:b5:cc:71:e3:79:ca:68:85:9b:1b:5c:52:bf:a2:5a:71:e3:
05:b5
-----BEGIN CERTIFICATE----- -----BEGIN CERTIFICATE-----
MIIBnjCCAQegAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI MIIBnjCCAQegAwIBAgIBAzANBgkqhkiG9w0BAQUFADASMRAwDgYDVQQDEwdUZXN0IENBMCIYDzI
wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBQxEjAQBgNVBAMTCVRlc3QgQ2VydDCBnz wMTcwMTAxMDAwMDAwWhgPMjAxODAxMDEwMDAwMDBaMBQxEjAQBgNVBAMTCVRlc3QgQ2VydDCBnz
......
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment