1 This is an otherwise valid TBSCertificate, except the extensions is an OCTET
2 STRING rather than a SEQUENCE.
6 -----BEGIN TBS CERTIFICATE-----
7 MEOgAwIBAgIBATADBAEBMAMEAQUwHhcNMTIxMDE4MDMxMjAwWhcNMTMxMDE4MTQ1OTU5WjADBAG
9 -----END TBS CERTIFICATE-----
11 $ openssl asn1parse -i < [TBS CERTIFICATE]
12 0:d=0 hl=2 l= 67 cons: SEQUENCE
13 2:d=1 hl=2 l= 3 cons: cont [ 0 ]
14 4:d=2 hl=2 l= 1 prim: INTEGER :02
15 7:d=1 hl=2 l= 1 prim: INTEGER :01
16 10:d=1 hl=2 l= 3 cons: SEQUENCE
17 12:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01
18 15:d=1 hl=2 l= 3 cons: SEQUENCE
19 17:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05
20 20:d=1 hl=2 l= 30 cons: SEQUENCE
21 22:d=2 hl=2 l= 13 prim: UTCTIME :121018031200Z
22 37:d=2 hl=2 l= 13 prim: UTCTIME :131018145959Z
23 52:d=1 hl=2 l= 3 cons: SEQUENCE
24 54:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83
25 57:d=1 hl=2 l= 3 cons: SEQUENCE
26 59:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3
27 62:d=1 hl=2 l= 5 cons: cont [ 3 ]
28 64:d=2 hl=2 l= 3 prim: OCTET STRING [HEX DUMP]:0401DD