1 This is a valid TBSCertificate. However the Serial Number is negative (which
2 strictly speaking is not correct).
6 -----BEGIN TBS CERTIFICATE-----
7 MEOgAwIBAgIIiR6QqQAANUAwAwQBATADBAEFMB4XDTEyMTAxODAzMTIwMFoXDTEzMTAxODE0NTk
9 -----END TBS CERTIFICATE-----
11 $ openssl asn1parse -i < [TBS CERTIFICATE]
12 0:d=0 hl=2 l= 67 cons: SEQUENCE
13 2:d=1 hl=2 l= 3 cons: cont [ 0 ]
14 4:d=2 hl=2 l= 1 prim: INTEGER :02
15 7:d=1 hl=2 l= 8 prim: INTEGER :-76E16F56FFFFCAC0
16 17:d=1 hl=2 l= 3 cons: SEQUENCE
17 19:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01
18 22:d=1 hl=2 l= 3 cons: SEQUENCE
19 24:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05
20 27:d=1 hl=2 l= 30 cons: SEQUENCE
21 29:d=2 hl=2 l= 13 prim: UTCTIME :121018031200Z
22 44:d=2 hl=2 l= 13 prim: UTCTIME :131018145959Z
23 59:d=1 hl=2 l= 3 cons: SEQUENCE
24 61:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83
25 64:d=1 hl=2 l= 3 cons: SEQUENCE
26 66:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3
30 -----BEGIN SERIAL NUMBER-----
32 -----END SERIAL NUMBER-----
36 -----BEGIN SIGNATURE ALGORITHM-----
38 -----END SIGNATURE ALGORITHM-----
40 $ openssl asn1parse -i < [SIGNATURE ALGORITHM]
41 0:d=0 hl=2 l= 3 cons: SEQUENCE
42 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01
46 -----BEGIN ISSUER-----
50 $ openssl asn1parse -i < [ISSUER]
51 0:d=0 hl=2 l= 3 cons: SEQUENCE
52 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05
56 -----BEGIN VALIDITY NOTBEFORE-----
57 eWVhcj0yMDEyLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0zLCBtaW51dGVzPTEyLCBzZWNvbmR
59 -----END VALIDITY NOTBEFORE-----
61 VALIDITY NOTBEFORE: year=2012, month=10, day=18, hours=3, minutes=12, seconds=0
65 -----BEGIN VALIDITY NOTAFTER-----
66 eWVhcj0yMDEzLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0xNCwgbWludXRlcz01OSwgc2Vjb25
68 -----END VALIDITY NOTAFTER-----
70 VALIDITY NOTAFTER: year=2013, month=10, day=18, hours=14, minutes=59, seconds=59
74 -----BEGIN SUBJECT-----
78 $ openssl asn1parse -i < [SUBJECT]
79 0:d=0 hl=2 l= 3 cons: SEQUENCE
80 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83
88 $ openssl asn1parse -i < [SPKI]
89 0:d=0 hl=2 l= 3 cons: SEQUENCE
90 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3