1 This is a valid TBSCertificate. However the Serial Number is negative (which
2 strictly speaking is not correct).
6 -----BEGIN TBS CERTIFICATE-----
7 MCigAwIBAgIIiR6QqQAANUAwAwQBATADBAEFMAMEAQgwAwQBCjADBAHz
8 -----END TBS CERTIFICATE-----
10 $ openssl asn1parse -i < [TBS CERTIFICATE]
11 0:d=0 hl=2 l= 40 cons: SEQUENCE
12 2:d=1 hl=2 l= 3 cons: cont [ 0 ]
13 4:d=2 hl=2 l= 1 prim: INTEGER :02
14 7:d=1 hl=2 l= 8 prim: INTEGER :-76E16F56FFFFCAC0
15 17:d=1 hl=2 l= 3 cons: SEQUENCE
16 19:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01
17 22:d=1 hl=2 l= 3 cons: SEQUENCE
18 24:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05
19 27:d=1 hl=2 l= 3 cons: SEQUENCE
20 29:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:08
21 32:d=1 hl=2 l= 3 cons: SEQUENCE
22 34:d=2 hl=2 l= 1 prim: OCTET STRING :
24 37:d=1 hl=2 l= 3 cons: SEQUENCE
25 39:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3
29 -----BEGIN SERIAL NUMBER-----
31 -----END SERIAL NUMBER-----
35 -----BEGIN SIGNATURE ALGORITHM-----
37 -----END SIGNATURE ALGORITHM-----
39 $ openssl asn1parse -i < [SIGNATURE ALGORITHM]
40 0:d=0 hl=2 l= 3 cons: SEQUENCE
41 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01
45 -----BEGIN ISSUER-----
49 $ openssl asn1parse -i < [ISSUER]
50 0:d=0 hl=2 l= 3 cons: SEQUENCE
51 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05
55 -----BEGIN VALIDITY-----
57 -----END VALIDITY-----
59 $ openssl asn1parse -i < [VALIDITY]
60 0:d=0 hl=2 l= 3 cons: SEQUENCE
61 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:08
65 -----BEGIN SUBJECT-----
69 $ openssl asn1parse -i < [SUBJECT]
70 0:d=0 hl=2 l= 3 cons: SEQUENCE
71 2:d=1 hl=2 l= 1 prim: OCTET STRING :
79 $ openssl asn1parse -i < [SPKI]
80 0:d=0 hl=2 l= 3 cons: SEQUENCE
81 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3