| This is a version 3 TBSCertificate containing all the possible optional fields. |
| |
| |
| $ openssl asn1parse -i < [TBS CERTIFICATE] |
| 0:d=0 hl=2 l= 75 cons: SEQUENCE |
| 2:d=1 hl=2 l= 3 cons: cont [ 0 ] |
| 4:d=2 hl=2 l= 1 prim: INTEGER :02 |
| 7:d=1 hl=2 l= 1 prim: INTEGER :01 |
| 10:d=1 hl=2 l= 3 cons: SEQUENCE |
| 12:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 |
| 15:d=1 hl=2 l= 3 cons: SEQUENCE |
| 17:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 |
| 20:d=1 hl=2 l= 30 cons: SEQUENCE |
| 22:d=2 hl=2 l= 13 prim: UTCTIME :121018031200Z |
| 37:d=2 hl=2 l= 13 prim: UTCTIME :131018145959Z |
| 52:d=1 hl=2 l= 3 cons: SEQUENCE |
| 54:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 |
| 57:d=1 hl=2 l= 3 cons: SEQUENCE |
| 59:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 |
| 62:d=1 hl=2 l= 2 prim: cont [ 1 ] |
| 66:d=1 hl=2 l= 2 prim: cont [ 2 ] |
| 70:d=1 hl=2 l= 5 cons: cont [ 3 ] |
| 72:d=2 hl=2 l= 3 cons: SEQUENCE |
| 74:d=3 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:DD |
| -----BEGIN TBS CERTIFICATE----- |
| MEugAwIBAgIBATADBAEBMAMEAQUwHhcNMTIxMDE4MDMxMjAwWhcNMTMxMDE4MTQ1OTU5WjADBAG |
| DMAMEAfOBAgC5ggIAyqMFMAMEAd0= |
| -----END TBS CERTIFICATE----- |
| |
| -----BEGIN SERIAL NUMBER----- |
| AQ== |
| -----END SERIAL NUMBER----- |
| |
| $ openssl asn1parse -i < [SIGNATURE ALGORITHM] |
| 0:d=0 hl=2 l= 3 cons: SEQUENCE |
| 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 |
| -----BEGIN SIGNATURE ALGORITHM----- |
| MAMEAQE= |
| -----END SIGNATURE ALGORITHM----- |
| |
| $ openssl asn1parse -i < [ISSUER] |
| 0:d=0 hl=2 l= 3 cons: SEQUENCE |
| 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 |
| -----BEGIN ISSUER----- |
| MAMEAQU= |
| -----END ISSUER----- |
| |
| VALIDITY NOTBEFORE: year=2012, month=10, day=18, hours=3, minutes=12, seconds=0 |
| -----BEGIN VALIDITY NOTBEFORE----- |
| eWVhcj0yMDEyLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0zLCBtaW51dGVzPTEyLCBzZWNvbmR |
| zPTA= |
| -----END VALIDITY NOTBEFORE----- |
| |
| VALIDITY NOTAFTER: year=2013, month=10, day=18, hours=14, minutes=59, seconds=59 |
| -----BEGIN VALIDITY NOTAFTER----- |
| eWVhcj0yMDEzLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0xNCwgbWludXRlcz01OSwgc2Vjb25 |
| kcz01OQ== |
| -----END VALIDITY NOTAFTER----- |
| |
| $ openssl asn1parse -i < [SUBJECT] |
| 0:d=0 hl=2 l= 3 cons: SEQUENCE |
| 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 |
| -----BEGIN SUBJECT----- |
| MAMEAYM= |
| -----END SUBJECT----- |
| |
| $ openssl asn1parse -i < [SPKI] |
| 0:d=0 hl=2 l= 3 cons: SEQUENCE |
| 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 |
| -----BEGIN SPKI----- |
| MAMEAfM= |
| -----END SPKI----- |
| |
| -----BEGIN ISSUER UNIQUE ID----- |
| uQ== |
| -----END ISSUER UNIQUE ID----- |
| |
| -----BEGIN SUBJECT UNIQUE ID----- |
| yg== |
| -----END SUBJECT UNIQUE ID----- |
| |
| $ openssl asn1parse -i < [EXTENSIONS] |
| 0:d=0 hl=2 l= 3 cons: SEQUENCE |
| 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:DD |
| -----BEGIN EXTENSIONS----- |
| MAMEAd0= |
| -----END EXTENSIONS----- |
