Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(204)

Unified Diff: net/data/parse_certificate_unittest/negative_serial.pem

Issue 1279963003: Add a function for parsing RFC 5280's "TBSCertificate". (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@cert_mapper
Patch Set: Fully move expectations to test data Created 5 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: net/data/parse_certificate_unittest/negative_serial.pem
diff --git a/net/data/parse_certificate_unittest/negative_serial.pem b/net/data/parse_certificate_unittest/negative_serial.pem
new file mode 100644
index 0000000000000000000000000000000000000000..31f9f1858f853774cb358b1298517b9403a4fbd1
--- /dev/null
+++ b/net/data/parse_certificate_unittest/negative_serial.pem
@@ -0,0 +1,324 @@
+$ openssl x509 -inform DER -text -noout < [CERTIFICATE]
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: -8566250385688218304 (-0x76e16f56ffffcac0)
+ Signature Algorithm: sha1WithRSAEncryption
+ Issuer: C=KR, O=CrossCert, OU=AccreditedCA, CN=CrossCert Class 1 Server CA
+ Validity
+ Not Before: Oct 18 03:12:00 2012 GMT
+ Not After : Oct 18 14:59:59 2013 GMT
+ Subject: C=KR, O=CrossCert, OU=AccreditedCA, OU=SSL, OU=000, CN=www.jongro-itbank.com
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:b1:9b:30:c6:3b:fc:f6:b6:db:3c:5c:82:a2:03:
+ 06:94:0e:ab:56:27:5a:d4:57:64:35:3b:d8:45:39:
+ 91:bf:88:8d:5e:b4:c1:90:3e:5e:3b:d2:2a:62:44:
+ 67:80:f0:5a:92:ec:1e:a4:5b:9a:d2:c2:8b:d5:02:
+ 0e:d8:44:55:99:a1:12:c5:13:f8:d6:55:c1:51:95:
+ 1d:7c:0f:fd:12:aa:59:be:1d:65:fe:cb:c3:42:33:
+ 54:64:06:b1:9c:d8:0c:24:33:2e:f4:81:c3:01:01:
+ cc:31:08:d4:ae:29:91:78:8b:9f:21:61:d9:4b:40:
+ e4:79:12:38:53:8a:22:26:68:91:54:e0:f4:d4:e7:
+ 76:80:50:86:8e:d5:be:b2:18:05:c4:5b:70:4e:9e:
+ 7b:2c:32:34:8d:a9:63:d6:d4:41:e1:ae:32:70:34:
+ ad:b6:75:ed:df:22:ea:e3:76:f4:c6:d8:eb:a2:06:
+ bb:c8:fb:c5:72:d5:a9:1d:d7:46:e9:03:f9:26:7f:
+ 9b:b5:59:d1:79:c8:c2:31:15:c9:49:fe:9d:ff:5b:
+ 5e:32:44:f8:a5:ea:85:df:63:a1:8b:ac:c4:cc:04:
+ d9:6e:e7:e5:5b:31:51:bf:1c:0b:63:84:aa:6d:56:
+ 6b:83:43:04:33:e9:69:2f:cb:1d:b2:71:35:15:49:
+ fe:03
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Authority Key Identifier:
+ keyid:6D:B8:FF:92:5C:B1:BF:E9:49:78:31:7C:80:75:C0:62:10:4B:BD:38
+ DirName:/C=KR/O=KISA/OU=Korea Certification Authority Central/CN=KISA RootCA 1
+ serial:27:87
+
+ X509v3 Subject Key Identifier:
+ 1A:C9:E5:E6:58:5E:9B:20:5F:F4:97:65:3D:9B:C3:BA:5A:99:09:B0
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Certificate Policies:
+ Policy: 1.2.410.200004.5.4.6
+ CPS: http://gca.crosscert.com/cps.html
+ User Notice:
+ Explicit Text: Çt
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:ldap://ssldir.crosscert.com:389/cn=s1dp6p1,ou=crldp,ou=AccreditedCA,o=CrossCert,c=KR?certificateRevocationList
+
+ Authority Information Access:
+ CA Issuers - URI:ldap://ssl.crosscert.com:389/cn=CrossCert Class 1 Server CA,ou=AccreditedCA,o=CrossCert,c=KR?cACertificate;binary
+
+ Signature Algorithm: sha1WithRSAEncryption
+ 72:eb:3a:c6:22:6f:f1:93:cb:9f:f6:30:9e:4f:c2:bf:ab:ef:
+ 6a:15:a0:36:5a:5d:36:b9:b5:18:71:80:ed:77:ad:22:06:51:
+ 8f:11:85:af:f2:dd:c2:1d:28:40:b1:37:16:ec:70:e3:a6:0f:
+ df:04:63:3b:76:9c:48:38:8c:0f:bf:ad:c7:ed:45:0d:75:f4:
+ b1:c7:0e:97:a2:06:a1:86:93:48:49:4f:00:20:4a:dc:f1:9f:
+ a6:77:85:b4:66:f5:2f:40:b2:fd:f1:fd:ab:dc:95:5f:62:d9:
+ 68:16:42:1b:0a:a4:cf:c6:01:de:f5:a3:f9:2b:b2:db:94:2c:
+ 8b:ce:c1:ee:a8:17:46:73:4d:e7:c7:d5:d4:92:d8:9b:6c:c7:
+ fc:bc:e9:9f:c9:aa:bf:e0:12:4b:d4:21:d5:ac:6a:5e:a2:f8:
+ 50:af:74:c5:01:38:bc:26:5f:7b:15:3f:dc:8a:24:d0:cf:28:
+ 1f:1b:f5:4e:25:12:89:19:fc:a2:ba:be:08:c8:43:64:0f:38:
+ a2:bb:e9:bf:a6:d6:ad:86:fe:5d:05:e6:6f:16:d1:78:5e:2c:
+ 5a:40:a6:87:32:68:0d:01:e7:f6:ba:54:6a:c2:18:c0:62:7c:
+ 6e:b2:1b:a4:99:3a:8f:2f:8b:0e:59:a3:86:6b:cb:a4:1f:0f:
+ c9:7e:f9:2c
+
+
+$ openssl asn1parse -i -inform DER < [CERTIFICATE]
+ 0:d=0 hl=4 l=1450 cons: SEQUENCE
+ 4:d=1 hl=4 l=1170 cons: SEQUENCE
+ 8:d=2 hl=2 l= 3 cons: cont [ 0 ]
+ 10:d=3 hl=2 l= 1 prim: INTEGER :02
+ 13:d=2 hl=2 l= 8 prim: INTEGER :-76E16F56FFFFCAC0
+ 23:d=2 hl=2 l= 13 cons: SEQUENCE
+ 25:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption
+ 36:d=3 hl=2 l= 0 prim: NULL
+ 38:d=2 hl=2 l= 94 cons: SEQUENCE
+ 40:d=3 hl=2 l= 11 cons: SET
+ 42:d=4 hl=2 l= 9 cons: SEQUENCE
+ 44:d=5 hl=2 l= 3 prim: OBJECT :countryName
+ 49:d=5 hl=2 l= 2 prim: PRINTABLESTRING :KR
+ 53:d=3 hl=2 l= 18 cons: SET
+ 55:d=4 hl=2 l= 16 cons: SEQUENCE
+ 57:d=5 hl=2 l= 3 prim: OBJECT :organizationName
+ 62:d=5 hl=2 l= 9 prim: UTF8STRING :CrossCert
+ 73:d=3 hl=2 l= 21 cons: SET
+ 75:d=4 hl=2 l= 19 cons: SEQUENCE
+ 77:d=5 hl=2 l= 3 prim: OBJECT :organizationalUnitName
+ 82:d=5 hl=2 l= 12 prim: UTF8STRING :AccreditedCA
+ 96:d=3 hl=2 l= 36 cons: SET
+ 98:d=4 hl=2 l= 34 cons: SEQUENCE
+ 100:d=5 hl=2 l= 3 prim: OBJECT :commonName
+ 105:d=5 hl=2 l= 27 prim: UTF8STRING :CrossCert Class 1 Server CA
+ 134:d=2 hl=2 l= 30 cons: SEQUENCE
+ 136:d=3 hl=2 l= 13 prim: UTCTIME :121018031200Z
+ 151:d=3 hl=2 l= 13 prim: UTCTIME :131018145959Z
+ 166:d=2 hl=2 l= 116 cons: SEQUENCE
+ 168:d=3 hl=2 l= 11 cons: SET
+ 170:d=4 hl=2 l= 9 cons: SEQUENCE
+ 172:d=5 hl=2 l= 3 prim: OBJECT :countryName
+ 177:d=5 hl=2 l= 2 prim: PRINTABLESTRING :KR
+ 181:d=3 hl=2 l= 18 cons: SET
+ 183:d=4 hl=2 l= 16 cons: SEQUENCE
+ 185:d=5 hl=2 l= 3 prim: OBJECT :organizationName
+ 190:d=5 hl=2 l= 9 prim: UTF8STRING :CrossCert
+ 201:d=3 hl=2 l= 21 cons: SET
+ 203:d=4 hl=2 l= 19 cons: SEQUENCE
+ 205:d=5 hl=2 l= 3 prim: OBJECT :organizationalUnitName
+ 210:d=5 hl=2 l= 12 prim: UTF8STRING :AccreditedCA
+ 224:d=3 hl=2 l= 12 cons: SET
+ 226:d=4 hl=2 l= 10 cons: SEQUENCE
+ 228:d=5 hl=2 l= 3 prim: OBJECT :organizationalUnitName
+ 233:d=5 hl=2 l= 3 prim: UTF8STRING :SSL
+ 238:d=3 hl=2 l= 12 cons: SET
+ 240:d=4 hl=2 l= 10 cons: SEQUENCE
+ 242:d=5 hl=2 l= 3 prim: OBJECT :organizationalUnitName
+ 247:d=5 hl=2 l= 3 prim: UTF8STRING :000
+ 252:d=3 hl=2 l= 30 cons: SET
+ 254:d=4 hl=2 l= 28 cons: SEQUENCE
+ 256:d=5 hl=2 l= 3 prim: OBJECT :commonName
+ 261:d=5 hl=2 l= 21 prim: UTF8STRING :www.jongro-itbank.com
+ 284:d=2 hl=4 l= 290 cons: SEQUENCE
+ 288:d=3 hl=2 l= 13 cons: SEQUENCE
+ 290:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption
+ 301:d=4 hl=2 l= 0 prim: NULL
+ 303:d=3 hl=4 l= 271 prim: BIT STRING
+ 578:d=2 hl=4 l= 596 cons: cont [ 3 ]
+ 582:d=3 hl=4 l= 592 cons: SEQUENCE
+ 586:d=4 hl=3 l= 143 cons: SEQUENCE
+ 589:d=5 hl=2 l= 3 prim: OBJECT :X509v3 Authority Key Identifier
+ 594:d=5 hl=3 l= 135 prim: OCTET STRING [HEX DUMP]:30818480146DB8FF925CB1BFE94978317C8075C062104BBD38A168A4663064310B3009060355040613024B52310D300B060355040A0C044B495341312E302C060355040B0C254B6F7265612043657274696669636174696F6E20417574686F726974792043656E7472616C3116301406035504030C0D4B49534120526F6F744341203182022787
+ 732:d=4 hl=2 l= 29 cons: SEQUENCE
+ 734:d=5 hl=2 l= 3 prim: OBJECT :X509v3 Subject Key Identifier
+ 739:d=5 hl=2 l= 22 prim: OCTET STRING [HEX DUMP]:04141AC9E5E6585E9B205FF497653D9BC3BA5A9909B0
+ 763:d=4 hl=2 l= 14 cons: SEQUENCE
+ 765:d=5 hl=2 l= 3 prim: OBJECT :X509v3 Key Usage
+ 770:d=5 hl=2 l= 1 prim: BOOLEAN :255
+ 773:d=5 hl=2 l= 4 prim: OCTET STRING [HEX DUMP]:030205A0
+ 779:d=4 hl=2 l= 123 cons: SEQUENCE
+ 781:d=5 hl=2 l= 3 prim: OBJECT :X509v3 Certificate Policies
+ 786:d=5 hl=2 l= 116 prim: OCTET STRING [HEX DUMP]:3072307006092A831A8C9A440504063063302D06082B060105050702011621687474703A2F2F6763612E63726F7373636572742E636F6D2F6370732E68746D6C303206082B0601050507020230261E24C7740020C778C99DC11CB2940020C6F9C11CBC840020C778C99DC11CC785B2C8B2E4002E
+ 904:d=4 hl=2 l= 127 cons: SEQUENCE
+ 906:d=5 hl=2 l= 3 prim: OBJECT :X509v3 CRL Distribution Points
+ 911:d=5 hl=2 l= 120 prim: OCTET STRING [HEX DUMP]:30763074A072A070866E6C6461703A2F2F73736C6469722E63726F7373636572742E636F6D3A3338392F636E3D733164703670312C6F753D63726C64702C6F753D4163637265646974656443412C6F3D43726F7373436572742C633D4B523F63657274696669636174655265766F636174696F6E4C697374
+ 1033:d=4 hl=3 l= 142 cons: SEQUENCE
+ 1036:d=5 hl=2 l= 8 prim: OBJECT :Authority Information Access
+ 1046:d=5 hl=3 l= 129 prim: OCTET STRING [HEX DUMP]:307F307D06082B0601050507300286716C6461703A2F2F73736C2E63726F7373636572742E636F6D3A3338392F636E3D43726F73734365727420436C6173732031205365727665722043412C6F753D4163637265646974656443412C6F3D43726F7373436572742C633D4B523F634143657274696669636174653B62696E617279
+ 1178:d=1 hl=2 l= 13 cons: SEQUENCE
+ 1180:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption
+ 1191:d=2 hl=2 l= 0 prim: NULL
+ 1193:d=1 hl=4 l= 257 prim: BIT STRING
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+
+
+-----BEGIN SIGNATURE-----
+cus6xiJv8ZPLn/Ywnk/Cv6vvahWgNlpdNrm1GHGA7XetIgZRjxGFr/Ldwh0oQLE3Fuxw46YP3wR
+jO3acSDiMD7+tx+1FDXX0sccOl6IGoYaTSElPACBK3PGfpneFtGb1L0Cy/fH9q9yVX2LZaBZCGw
+qkz8YB3vWj+Suy25Qsi87B7qgXRnNN58fV1JLYm2zH/Lzpn8mqv+ASS9Qh1axqXqL4UK90xQE4v
+CZfexU/3Iok0M8oHxv1TiUSiRn8orq+CMhDZA84orvpv6bWrYb+XQXmbxbReF4sWkCmhzJoDQHn
+9rpUasIYwGJ8brIbpJk6jy+LDlmjhmvLpB8PyX75LA==
+-----END SIGNATURE-----
+
+$ openssl asn1parse -i -inform DER < [SIGNATURE ALGORITHM]
+ 0:d=0 hl=2 l= 13 cons: SEQUENCE
+ 2:d=1 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption
+ 13:d=1 hl=2 l= 0 prim: NULL
+-----BEGIN SIGNATURE ALGORITHM-----
+MA0GCSqGSIb3DQEBBQUA
+-----END SIGNATURE ALGORITHM-----
+
+
+-----BEGIN SERIAL NUMBER-----
+iR6QqQAANUA=
+-----END SERIAL NUMBER-----
+
+$ openssl asn1parse -i -inform DER < [ISSUER]
+ 0:d=0 hl=2 l= 94 cons: SEQUENCE
+ 2:d=1 hl=2 l= 11 cons: SET
+ 4:d=2 hl=2 l= 9 cons: SEQUENCE
+ 6:d=3 hl=2 l= 3 prim: OBJECT :countryName
+ 11:d=3 hl=2 l= 2 prim: PRINTABLESTRING :KR
+ 15:d=1 hl=2 l= 18 cons: SET
+ 17:d=2 hl=2 l= 16 cons: SEQUENCE
+ 19:d=3 hl=2 l= 3 prim: OBJECT :organizationName
+ 24:d=3 hl=2 l= 9 prim: UTF8STRING :CrossCert
+ 35:d=1 hl=2 l= 21 cons: SET
+ 37:d=2 hl=2 l= 19 cons: SEQUENCE
+ 39:d=3 hl=2 l= 3 prim: OBJECT :organizationalUnitName
+ 44:d=3 hl=2 l= 12 prim: UTF8STRING :AccreditedCA
+ 58:d=1 hl=2 l= 36 cons: SET
+ 60:d=2 hl=2 l= 34 cons: SEQUENCE
+ 62:d=3 hl=2 l= 3 prim: OBJECT :commonName
+ 67:d=3 hl=2 l= 27 prim: UTF8STRING :CrossCert Class 1 Server CA
+-----BEGIN ISSUER-----
+MF4xCzAJBgNVBAYTAktSMRIwEAYDVQQKDAlDcm9zc0NlcnQxFTATBgNVBAsMDEFjY3JlZGl0ZWR
+DQTEkMCIGA1UEAwwbQ3Jvc3NDZXJ0IENsYXNzIDEgU2VydmVyIENB
+-----END ISSUER-----
+
+$ openssl asn1parse -i -inform DER < [VALIDITY]
+ 0:d=0 hl=2 l= 30 cons: SEQUENCE
+ 2:d=1 hl=2 l= 13 prim: UTCTIME :121018031200Z
+ 17:d=1 hl=2 l= 13 prim: UTCTIME :131018145959Z
+-----BEGIN VALIDITY-----
+MB4XDTEyMTAxODAzMTIwMFoXDTEzMTAxODE0NTk1OVo=
+-----END VALIDITY-----
+
+$ openssl asn1parse -i -inform DER < [SUBJECT]
+ 0:d=0 hl=2 l= 116 cons: SEQUENCE
+ 2:d=1 hl=2 l= 11 cons: SET
+ 4:d=2 hl=2 l= 9 cons: SEQUENCE
+ 6:d=3 hl=2 l= 3 prim: OBJECT :countryName
+ 11:d=3 hl=2 l= 2 prim: PRINTABLESTRING :KR
+ 15:d=1 hl=2 l= 18 cons: SET
+ 17:d=2 hl=2 l= 16 cons: SEQUENCE
+ 19:d=3 hl=2 l= 3 prim: OBJECT :organizationName
+ 24:d=3 hl=2 l= 9 prim: UTF8STRING :CrossCert
+ 35:d=1 hl=2 l= 21 cons: SET
+ 37:d=2 hl=2 l= 19 cons: SEQUENCE
+ 39:d=3 hl=2 l= 3 prim: OBJECT :organizationalUnitName
+ 44:d=3 hl=2 l= 12 prim: UTF8STRING :AccreditedCA
+ 58:d=1 hl=2 l= 12 cons: SET
+ 60:d=2 hl=2 l= 10 cons: SEQUENCE
+ 62:d=3 hl=2 l= 3 prim: OBJECT :organizationalUnitName
+ 67:d=3 hl=2 l= 3 prim: UTF8STRING :SSL
+ 72:d=1 hl=2 l= 12 cons: SET
+ 74:d=2 hl=2 l= 10 cons: SEQUENCE
+ 76:d=3 hl=2 l= 3 prim: OBJECT :organizationalUnitName
+ 81:d=3 hl=2 l= 3 prim: UTF8STRING :000
+ 86:d=1 hl=2 l= 30 cons: SET
+ 88:d=2 hl=2 l= 28 cons: SEQUENCE
+ 90:d=3 hl=2 l= 3 prim: OBJECT :commonName
+ 95:d=3 hl=2 l= 21 prim: UTF8STRING :www.jongro-itbank.com
+-----BEGIN SUBJECT-----
+MHQxCzAJBgNVBAYTAktSMRIwEAYDVQQKDAlDcm9zc0NlcnQxFTATBgNVBAsMDEFjY3JlZGl0ZWR
+DQTEMMAoGA1UECwwDU1NMMQwwCgYDVQQLDAMwMDAxHjAcBgNVBAMMFXd3dy5qb25ncm8taXRiYW
+5rLmNvbQ==
+-----END SUBJECT-----
+
+$ openssl asn1parse -i -inform DER < [SPKI]
+ 0:d=0 hl=4 l= 290 cons: SEQUENCE
+ 4:d=1 hl=2 l= 13 cons: SEQUENCE
+ 6:d=2 hl=2 l= 9 prim: OBJECT :rsaEncryption
+ 17:d=2 hl=2 l= 0 prim: NULL
+ 19:d=1 hl=4 l= 271 prim: BIT STRING
+-----BEGIN SPKI-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZswxjv89rbbPFyCogMGlA6rVida1Fd
+kNTvYRTmRv4iNXrTBkD5eO9IqYkRngPBakuwepFua0sKL1QIO2ERVmaESxRP41lXBUZUdfA/9Eq
+pZvh1l/svDQjNUZAaxnNgMJDMu9IHDAQHMMQjUrimReIufIWHZS0DkeRI4U4oiJmiRVOD01Od2g
+FCGjtW+shgFxFtwTp57LDI0jalj1tRB4a4ycDSttnXt3yLq43b0xtjroga7yPvFctWpHddG6QP5
+Jn+btVnRecjCMRXJSf6d/1teMkT4peqF32Ohi6zEzATZbuflWzFRvxwLY4SqbVZrg0MEM+lpL8s
+dsnE1FUn+AwIDAQAB
+-----END SPKI-----
+
+$ openssl asn1parse -i -inform DER < [EXTENSIONS]
+ 0:d=0 hl=4 l= 592 cons: SEQUENCE
+ 4:d=1 hl=3 l= 143 cons: SEQUENCE
+ 7:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Authority Key Identifier
+ 12:d=2 hl=3 l= 135 prim: OCTET STRING [HEX DUMP]:30818480146DB8FF925CB1BFE94978317C8075C062104BBD38A168A4663064310B3009060355040613024B52310D300B060355040A0C044B495341312E302C060355040B0C254B6F7265612043657274696669636174696F6E20417574686F726974792043656E7472616C3116301406035504030C0D4B49534120526F6F744341203182022787
+ 150:d=1 hl=2 l= 29 cons: SEQUENCE
+ 152:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Subject Key Identifier
+ 157:d=2 hl=2 l= 22 prim: OCTET STRING [HEX DUMP]:04141AC9E5E6585E9B205FF497653D9BC3BA5A9909B0
+ 181:d=1 hl=2 l= 14 cons: SEQUENCE
+ 183:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Key Usage
+ 188:d=2 hl=2 l= 1 prim: BOOLEAN :255
+ 191:d=2 hl=2 l= 4 prim: OCTET STRING [HEX DUMP]:030205A0
+ 197:d=1 hl=2 l= 123 cons: SEQUENCE
+ 199:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Certificate Policies
+ 204:d=2 hl=2 l= 116 prim: OCTET STRING [HEX DUMP]:3072307006092A831A8C9A440504063063302D06082B060105050702011621687474703A2F2F6763612E63726F7373636572742E636F6D2F6370732E68746D6C303206082B0601050507020230261E24C7740020C778C99DC11CB2940020C6F9C11CBC840020C778C99DC11CC785B2C8B2E4002E
+ 322:d=1 hl=2 l= 127 cons: SEQUENCE
+ 324:d=2 hl=2 l= 3 prim: OBJECT :X509v3 CRL Distribution Points
+ 329:d=2 hl=2 l= 120 prim: OCTET STRING [HEX DUMP]:30763074A072A070866E6C6461703A2F2F73736C6469722E63726F7373636572742E636F6D3A3338392F636E3D733164703670312C6F753D63726C64702C6F753D4163637265646974656443412C6F3D43726F7373436572742C633D4B523F63657274696669636174655265766F636174696F6E4C697374
+ 451:d=1 hl=3 l= 142 cons: SEQUENCE
+ 454:d=2 hl=2 l= 8 prim: OBJECT :Authority Information Access
+ 464:d=2 hl=3 l= 129 prim: OCTET STRING [HEX DUMP]:307F307D06082B0601050507300286716C6461703A2F2F73736C2E63726F7373636572742E636F6D3A3338392F636E3D43726F73734365727420436C6173732031205365727665722043412C6F753D4163637265646974656443412C6F3D43726F7373436572742C633D4B523F634143657274696669636174653B62696E617279
+-----BEGIN EXTENSIONS-----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+-----END EXTENSIONS-----
+

Powered by Google App Engine
This is Rietveld 408576698