1 This is a very basic TBSCertificate. It is valid from the perspective of
2 ParseTbsCertificate(), however its sub-fields are mainly bogus. This
3 TBSCertificate contains extensions.
6 -----BEGIN TBS CERTIFICATE-----
7 MEOgAwIBAgIBATADBAEBMAMEAQUwHhcNMTIxMDE4MDMxMjAwWhcNMTMxMDE4MTQ1OTU5WjADBAG
9 -----END TBS CERTIFICATE-----
11 $ openssl asn1parse -i < [TBS CERTIFICATE]
12 0:d=0 hl=2 l= 67 cons: SEQUENCE
13 2:d=1 hl=2 l= 3 cons: cont [ 0 ]
14 4:d=2 hl=2 l= 1 prim: INTEGER :02
15 7:d=1 hl=2 l= 1 prim: INTEGER :01
16 10:d=1 hl=2 l= 3 cons: SEQUENCE
17 12:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01
18 15:d=1 hl=2 l= 3 cons: SEQUENCE
19 17:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05
20 20:d=1 hl=2 l= 30 cons: SEQUENCE
21 22:d=2 hl=2 l= 13 prim: UTCTIME :121018031200Z
22 37:d=2 hl=2 l= 13 prim: UTCTIME :131018145959Z
23 52:d=1 hl=2 l= 3 cons: SEQUENCE
24 54:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83
25 57:d=1 hl=2 l= 3 cons: SEQUENCE
26 59:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3
27 62:d=1 hl=2 l= 5 cons: cont [ 3 ]
28 64:d=2 hl=2 l= 3 cons: SEQUENCE
29 66:d=3 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:DD
33 -----BEGIN SERIAL NUMBER-----
35 -----END SERIAL NUMBER-----
39 -----BEGIN SIGNATURE ALGORITHM-----
41 -----END SIGNATURE ALGORITHM-----
43 $ openssl asn1parse -i < [SIGNATURE ALGORITHM]
44 0:d=0 hl=2 l= 3 cons: SEQUENCE
45 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01
49 -----BEGIN ISSUER-----
53 $ openssl asn1parse -i < [ISSUER]
54 0:d=0 hl=2 l= 3 cons: SEQUENCE
55 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05
59 -----BEGIN VALIDITY NOTBEFORE-----
60 eWVhcj0yMDEyLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0zLCBtaW51dGVzPTEyLCBzZWNvbmR
62 -----END VALIDITY NOTBEFORE-----
64 VALIDITY NOTBEFORE: year=2012, month=10, day=18, hours=3, minutes=12, seconds=0
68 -----BEGIN VALIDITY NOTAFTER-----
69 eWVhcj0yMDEzLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0xNCwgbWludXRlcz01OSwgc2Vjb25
71 -----END VALIDITY NOTAFTER-----
73 VALIDITY NOTAFTER: year=2013, month=10, day=18, hours=14, minutes=59, seconds=59
77 -----BEGIN SUBJECT-----
81 $ openssl asn1parse -i < [SUBJECT]
82 0:d=0 hl=2 l= 3 cons: SEQUENCE
83 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83
91 $ openssl asn1parse -i < [SPKI]
92 0:d=0 hl=2 l= 3 cons: SEQUENCE
93 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3
97 -----BEGIN EXTENSIONS-----
99 -----END EXTENSIONS-----
101 $ openssl asn1parse -i < [EXTENSIONS]
102 0:d=0 hl=2 l= 3 cons: SEQUENCE
103 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:DD