Table of Contents
Advertisement
Sample Certificate Extensions
The following is an example of the section of a certificate containing X.509 v3
extensions. (CMS can display certificates in human-readable format, as shown
here.) As shown in the example, certificate extensions appear in sequence and only
one instance of a particular extension may appear in a particular certificate; for
example, a certificate may contain only one subject key identifier extension. Note
that certificates that support these extensions have the version 0x2 (which
corresponds to version 3).
Data:
Version:
Serial Number: 0x1
Signature Algorithm: SHA1withRSA - 1.2.840.113549.1.1.5
Issuer: CN=Certificate Manager,OU=netscape,O=aol,L=MV,ST=CA,C=US
Validity:
Not Before: Friday, February 21, 2003 12:00:00 AM PST America/Los_Angeles
Not
Subject: CN=Certificate Manager,OU=netscape,O=aol,L=MV,ST=CA,C=US
Subject Public Key Info:
Algorithm: RSA - 1.2.840.113549.1.1.1
Public Key:
Extensions:
Identifier: Netscape Certificate Type - 2.16.840.1.113730.1.1
v3
After: Monday, February 21, 2005 12:00:00 AM PST America/Los_Angeles
Exponent: 65537
Public Key Modulus: (1024 bits) :
E4:71:2A:CE:E4:24:DC:C4:AB:DF:A3:2E:80:42:0B:D9:
CF:90:BE:88:4A:5C:C5:B3:73:BF:49:4D:77:31:8A:88:
15:A7:56:5F:E4:93:68:83:00:BB:4F:C0:47:03:67:F1:
30:79:43:08:1C:28:A8:97:70:40:CA:64:FA:9E:42:DF:
35:3D:0E:75:C6:B9:F2:47:0B:D5:CE:24:DD:0A:F7:84:
4E:FA:16:29:3B:91:D3:EE:24:E9:AF:F6:A1:49:E1:96:
70:DE:6F:B2:BE:3A:07:1A:0B:FD:FE:2F:75:FD:F9:FC:
63:69:36:B6:5B:09:C6:84:92:17:9C:3E:64:C3:C4:C9
Critical: no
Certificate Usage:
SSL CA
Introduction to Certificate Extensions
Appendix G
Certificate and CRL Extensions
721
Advertisement
Table of Contents
