Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(182)

Unified Diff: net/data/parse_certificate_unittest/version3.pem

Issue 1279963003: Add a function for parsing RFC 5280's "TBSCertificate". (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@cert_mapper
Patch Set: Fully move expectations to test data Created 5 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: net/data/parse_certificate_unittest/version3.pem
diff --git a/net/data/parse_certificate_unittest/version3.pem b/net/data/parse_certificate_unittest/version3.pem
new file mode 100644
index 0000000000000000000000000000000000000000..2abfaa37d363981fc1fc2d2f07c1d8a951f30149
--- /dev/null
+++ b/net/data/parse_certificate_unittest/version3.pem
@@ -0,0 +1,352 @@
+$ openssl x509 -inform DER -text -noout < [CERTIFICATE]
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 12212980736348278 (0x2b63a42a705076)
+ Signature Algorithm: sha1WithRSAEncryption
+ Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certificates.godaddy.com/repository, CN=Go Daddy Secure Certification Authority/serialNumber=07969287
+ Validity
+ Not Before: Apr 19 13:53:24 2012 GMT
+ Not After : Apr 19 13:53:24 2013 GMT
+ Subject: O=kthulhu.net, OU=Domain Control Validated, CN=kthulhu.net
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:af:34:24:b8:46:6f:e7:19:0d:2c:9e:d1:0a:00:
+ 18:98:7e:2f:1b:ce:c5:14:f1:66:e4:9f:bd:39:b7:
+ a7:34:01:6a:9b:c5:79:0b:82:33:5e:6d:7e:b3:ba:
+ e8:d2:c9:dd:2c:ec:83:1f:92:0d:34:0b:4a:92:ea:
+ a9:ee:4a:ae:6e:5d:5b:6c:fd:d9:e3:e4:5a:dc:43:
+ 6f:ed:ca:70:41:b4:23:a1:a6:a3:44:a0:86:45:42:
+ ec:fe:31:4c:08:00:12:8a:2f:fe:de:39:24:b9:f3:
+ 62:9a:ee:dc:05:f0:d7:39:24:11:d9:84:19:2f:8c:
+ e1:0d:6e:ec:b3:fc:f0:4d:5b:29:62:7c:6f:53:ba:
+ 03:72:a3:88:c0:29:85:c1:0f:c5:bd:84:c0:c4:5d:
+ 6e:a3:32:81:b0:97:cb:f3:9e:2f:d0:c2:88:ec:61:
+ 32:ca:7e:96:f2:36:7b:7f:c7:12:73:c6:a1:be:b2:
+ c0:62:df:de:b4:0c:6b:98:77:0c:51:52:5b:5b:e8:
+ 31:5e:2c:09:b0:77:e3:d3:74:b5:fd:1c:a9:1d:36:
+ f8:81:1a:84:cf:7a:57:eb:09:7c:b2:ab:49:3f:42:
+ f9:99:7b:90:80:44:a8:10:06:78:4a:b3:d8:2f:15:
+ f2:b6:aa:d4:d7:22:e2:df:6c:60:5b:01:ee:d4:0e:
+ df:21
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:FALSE
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+ URI:http://crl.godaddy.com/gds1-68.crl
+
+ X509v3 Certificate Policies:
+ Policy: 2.16.840.1.114413.1.7.23.1
+ CPS: http://certificates.godaddy.com/repository/
+
+ Authority Information Access:
+ OCSP - URI:http://ocsp.godaddy.com/
+ CA Issuers - URI:http://certificates.godaddy.com/repository/gd_intermediate.crt
+
+ X509v3 Authority Key Identifier:
+ keyid:FD:AC:61:32:93:6C:45:D6:E2:EE:85:5F:9A:BA:E7:76:99:68:CC:E7
+
+ X509v3 Subject Alternative Name:
+ DNS:kthulhu.net, DNS:www.kthulhu.net
+ X509v3 Subject Key Identifier:
+ A3:1E:1A:B1:A9:E4:F5:50:BC:3E:05:E1:74:CF:01:D0:9E:35:E0:17
+ Signature Algorithm: sha1WithRSAEncryption
+ b7:84:1b:d4:33:48:2e:04:12:5c:aa:c5:43:35:e8:45:1a:d7:
+ 7e:c2:c6:e0:a8:41:cc:0c:64:8c:20:ae:5a:86:0e:2b:82:a5:
+ 1e:be:a7:bd:f3:15:5b:f6:7d:df:30:5d:33:0a:cf:f7:2d:80:
+ 3a:99:bc:ca:42:8f:22:d9:77:5b:6f:27:2b:03:42:dc:fa:4d:
+ 8b:49:3d:7e:8b:5f:6b:af:48:9d:61:be:83:97:c9:b3:c8:e6:
+ df:d1:14:10:1d:9e:70:8e:3f:86:4a:13:a4:e1:21:97:b8:87:
+ 75:84:9c:84:25:9a:0d:52:37:6e:df:21:f2:3d:ff:8a:e9:46:
+ 83:b6:9e:01:dc:40:99:64:fc:b3:d7:d4:85:b1:84:ec:05:7e:
+ cf:9b:5b:b4:b4:0e:a4:0e:93:5a:35:0c:4e:94:41:10:43:ea:
+ 20:28:57:aa:48:9e:dd:d3:fd:c3:f3:75:85:98:8c:6d:1c:a5:
+ 7b:8e:95:9c:65:c4:95:0e:36:9c:8c:56:48:b1:54:e0:8d:08:
+ 24:80:89:24:52:b0:2f:aa:c1:4f:15:37:14:9d:7a:20:93:aa:
+ ad:1b:11:f8:0b:5e:f0:5e:84:0e:ed:3b:1a:fa:3d:cc:71:83:
+ f5:1d:99:82:c4:18:bb:af:77:d9:24:4b:b9:93:94:e9:bc:35:
+ 38:29:e9:9f
+
+
+$ openssl asn1parse -i -inform DER < [CERTIFICATE]
+ 0:d=0 hl=4 l=1367 cons: SEQUENCE
+ 4:d=1 hl=4 l=1087 cons: SEQUENCE
+ 8:d=2 hl=2 l= 3 cons: cont [ 0 ]
+ 10:d=3 hl=2 l= 1 prim: INTEGER :02
+ 13:d=2 hl=2 l= 7 prim: INTEGER :2B63A42A705076
+ 22:d=2 hl=2 l= 13 cons: SEQUENCE
+ 24:d=3 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption
+ 35:d=3 hl=2 l= 0 prim: NULL
+ 37:d=2 hl=3 l= 202 cons: SEQUENCE
+ 40:d=3 hl=2 l= 11 cons: SET
+ 42:d=4 hl=2 l= 9 cons: SEQUENCE
+ 44:d=5 hl=2 l= 3 prim: OBJECT :countryName
+ 49:d=5 hl=2 l= 2 prim: PRINTABLESTRING :US
+ 53:d=3 hl=2 l= 16 cons: SET
+ 55:d=4 hl=2 l= 14 cons: SEQUENCE
+ 57:d=5 hl=2 l= 3 prim: OBJECT :stateOrProvinceName
+ 62:d=5 hl=2 l= 7 prim: PRINTABLESTRING :Arizona
+ 71:d=3 hl=2 l= 19 cons: SET
+ 73:d=4 hl=2 l= 17 cons: SEQUENCE
+ 75:d=5 hl=2 l= 3 prim: OBJECT :localityName
+ 80:d=5 hl=2 l= 10 prim: PRINTABLESTRING :Scottsdale
+ 92:d=3 hl=2 l= 26 cons: SET
+ 94:d=4 hl=2 l= 24 cons: SEQUENCE
+ 96:d=5 hl=2 l= 3 prim: OBJECT :organizationName
+ 101:d=5 hl=2 l= 17 prim: PRINTABLESTRING :GoDaddy.com, Inc.
+ 120:d=3 hl=2 l= 51 cons: SET
+ 122:d=4 hl=2 l= 49 cons: SEQUENCE
+ 124:d=5 hl=2 l= 3 prim: OBJECT :organizationalUnitName
+ 129:d=5 hl=2 l= 42 prim: PRINTABLESTRING :http://certificates.godaddy.com/repository
+ 173:d=3 hl=2 l= 48 cons: SET
+ 175:d=4 hl=2 l= 46 cons: SEQUENCE
+ 177:d=5 hl=2 l= 3 prim: OBJECT :commonName
+ 182:d=5 hl=2 l= 39 prim: PRINTABLESTRING :Go Daddy Secure Certification Authority
+ 223:d=3 hl=2 l= 17 cons: SET
+ 225:d=4 hl=2 l= 15 cons: SEQUENCE
+ 227:d=5 hl=2 l= 3 prim: OBJECT :serialNumber
+ 232:d=5 hl=2 l= 8 prim: PRINTABLESTRING :07969287
+ 242:d=2 hl=2 l= 30 cons: SEQUENCE
+ 244:d=3 hl=2 l= 13 prim: UTCTIME :120419135324Z
+ 259:d=3 hl=2 l= 13 prim: UTCTIME :130419135324Z
+ 274:d=2 hl=2 l= 79 cons: SEQUENCE
+ 276:d=3 hl=2 l= 20 cons: SET
+ 278:d=4 hl=2 l= 18 cons: SEQUENCE
+ 280:d=5 hl=2 l= 3 prim: OBJECT :organizationName
+ 285:d=5 hl=2 l= 11 prim: PRINTABLESTRING :kthulhu.net
+ 298:d=3 hl=2 l= 33 cons: SET
+ 300:d=4 hl=2 l= 31 cons: SEQUENCE
+ 302:d=5 hl=2 l= 3 prim: OBJECT :organizationalUnitName
+ 307:d=5 hl=2 l= 24 prim: PRINTABLESTRING :Domain Control Validated
+ 333:d=3 hl=2 l= 20 cons: SET
+ 335:d=4 hl=2 l= 18 cons: SEQUENCE
+ 337:d=5 hl=2 l= 3 prim: OBJECT :commonName
+ 342:d=5 hl=2 l= 11 prim: PRINTABLESTRING :kthulhu.net
+ 355:d=2 hl=4 l= 290 cons: SEQUENCE
+ 359:d=3 hl=2 l= 13 cons: SEQUENCE
+ 361:d=4 hl=2 l= 9 prim: OBJECT :rsaEncryption
+ 372:d=4 hl=2 l= 0 prim: NULL
+ 374:d=3 hl=4 l= 271 prim: BIT STRING
+ 649:d=2 hl=4 l= 442 cons: cont [ 3 ]
+ 653:d=3 hl=4 l= 438 cons: SEQUENCE
+ 657:d=4 hl=2 l= 15 cons: SEQUENCE
+ 659:d=5 hl=2 l= 3 prim: OBJECT :X509v3 Basic Constraints
+ 664:d=5 hl=2 l= 1 prim: BOOLEAN :255
+ 667:d=5 hl=2 l= 5 prim: OCTET STRING [HEX DUMP]:3003010100
+ 674:d=4 hl=2 l= 29 cons: SEQUENCE
+ 676:d=5 hl=2 l= 3 prim: OBJECT :X509v3 Extended Key Usage
+ 681:d=5 hl=2 l= 22 prim: OCTET STRING [HEX DUMP]:301406082B0601050507030106082B06010505070302
+ 705:d=4 hl=2 l= 14 cons: SEQUENCE
+ 707:d=5 hl=2 l= 3 prim: OBJECT :X509v3 Key Usage
+ 712:d=5 hl=2 l= 1 prim: BOOLEAN :255
+ 715:d=5 hl=2 l= 4 prim: OCTET STRING [HEX DUMP]:030205A0
+ 721:d=4 hl=2 l= 51 cons: SEQUENCE
+ 723:d=5 hl=2 l= 3 prim: OBJECT :X509v3 CRL Distribution Points
+ 728:d=5 hl=2 l= 44 prim: OCTET STRING [HEX DUMP]:302A3028A026A0248622687474703A2F2F63726C2E676F64616464792E636F6D2F676473312D36382E63726C
+ 774:d=4 hl=2 l= 83 cons: SEQUENCE
+ 776:d=5 hl=2 l= 3 prim: OBJECT :X509v3 Certificate Policies
+ 781:d=5 hl=2 l= 76 prim: OCTET STRING [HEX DUMP]:304A3048060B6086480186FD6D010717013039303706082B06010505070201162B687474703A2F2F6365727469666963617465732E676F64616464792E636F6D2F7265706F7369746F72792F
+ 859:d=4 hl=3 l= 128 cons: SEQUENCE
+ 862:d=5 hl=2 l= 8 prim: OBJECT :Authority Information Access
+ 872:d=5 hl=2 l= 116 prim: OCTET STRING [HEX DUMP]:3072302406082B060105050730018618687474703A2F2F6F6373702E676F64616464792E636F6D2F304A06082B06010505073002863E687474703A2F2F6365727469666963617465732E676F64616464792E636F6D2F7265706F7369746F72792F67645F696E7465726D6564696174652E637274
+ 990:d=4 hl=2 l= 31 cons: SEQUENCE
+ 992:d=5 hl=2 l= 3 prim: OBJECT :X509v3 Authority Key Identifier
+ 997:d=5 hl=2 l= 24 prim: OCTET STRING [HEX DUMP]:30168014FDAC6132936C45D6E2EE855F9ABAE7769968CCE7
+ 1023:d=4 hl=2 l= 39 cons: SEQUENCE
+ 1025:d=5 hl=2 l= 3 prim: OBJECT :X509v3 Subject Alternative Name
+ 1030:d=5 hl=2 l= 32 prim: OCTET STRING [HEX DUMP]:301E820B6B7468756C68752E6E6574820F7777772E6B7468756C68752E6E6574
+ 1064:d=4 hl=2 l= 29 cons: SEQUENCE
+ 1066:d=5 hl=2 l= 3 prim: OBJECT :X509v3 Subject Key Identifier
+ 1071:d=5 hl=2 l= 22 prim: OCTET STRING [HEX DUMP]:0414A31E1AB1A9E4F550BC3E05E174CF01D09E35E017
+ 1095:d=1 hl=2 l= 13 cons: SEQUENCE
+ 1097:d=2 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption
+ 1108:d=2 hl=2 l= 0 prim: NULL
+ 1110:d=1 hl=4 l= 257 prim: BIT STRING
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+
+-----BEGIN SIGNATURE-----
+t4Qb1DNILgQSXKrFQzXoRRrXfsLG4KhBzAxkjCCuWoYOK4KlHr6nvfMVW/Z93zBdMwrP9y2AOpm
+8ykKPItl3W28nKwNC3PpNi0k9fotfa69InWG+g5fJs8jm39EUEB2ecI4/hkoTpOEhl7iHdYSchC
+WaDVI3bt8h8j3/iulGg7aeAdxAmWT8s9fUhbGE7AV+z5tbtLQOpA6TWjUMTpRBEEPqIChXqkie3
+dP9w/N1hZiMbRyle46VnGXElQ42nIxWSLFU4I0IJICJJFKwL6rBTxU3FJ16IJOqrRsR+Ate8F6E
+Du07Gvo9zHGD9R2ZgsQYu6932SRLuZOU6bw1OCnpnw==
+-----END SIGNATURE-----
+
+$ openssl asn1parse -i -inform DER < [SIGNATURE ALGORITHM]
+ 0:d=0 hl=2 l= 13 cons: SEQUENCE
+ 2:d=1 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption
+ 13:d=1 hl=2 l= 0 prim: NULL
+-----BEGIN SIGNATURE ALGORITHM-----
+MA0GCSqGSIb3DQEBBQUA
+-----END SIGNATURE ALGORITHM-----
+
+
+-----BEGIN SERIAL NUMBER-----
+K2OkKnBQdg==
+-----END SERIAL NUMBER-----
+
+$ openssl asn1parse -i -inform DER < [SIGNATURE ALGORITHM]
+ 0:d=0 hl=2 l= 13 cons: SEQUENCE
+ 2:d=1 hl=2 l= 9 prim: OBJECT :sha1WithRSAEncryption
+ 13:d=1 hl=2 l= 0 prim: NULL
+-----BEGIN SIGNATURE ALGORITHM-----
+MA0GCSqGSIb3DQEBBQUA
+-----END SIGNATURE ALGORITHM-----
+
+$ openssl asn1parse -i -inform DER < [ISSUER]
+ 0:d=0 hl=3 l= 202 cons: SEQUENCE
+ 3:d=1 hl=2 l= 11 cons: SET
+ 5:d=2 hl=2 l= 9 cons: SEQUENCE
+ 7:d=3 hl=2 l= 3 prim: OBJECT :countryName
+ 12:d=3 hl=2 l= 2 prim: PRINTABLESTRING :US
+ 16:d=1 hl=2 l= 16 cons: SET
+ 18:d=2 hl=2 l= 14 cons: SEQUENCE
+ 20:d=3 hl=2 l= 3 prim: OBJECT :stateOrProvinceName
+ 25:d=3 hl=2 l= 7 prim: PRINTABLESTRING :Arizona
+ 34:d=1 hl=2 l= 19 cons: SET
+ 36:d=2 hl=2 l= 17 cons: SEQUENCE
+ 38:d=3 hl=2 l= 3 prim: OBJECT :localityName
+ 43:d=3 hl=2 l= 10 prim: PRINTABLESTRING :Scottsdale
+ 55:d=1 hl=2 l= 26 cons: SET
+ 57:d=2 hl=2 l= 24 cons: SEQUENCE
+ 59:d=3 hl=2 l= 3 prim: OBJECT :organizationName
+ 64:d=3 hl=2 l= 17 prim: PRINTABLESTRING :GoDaddy.com, Inc.
+ 83:d=1 hl=2 l= 51 cons: SET
+ 85:d=2 hl=2 l= 49 cons: SEQUENCE
+ 87:d=3 hl=2 l= 3 prim: OBJECT :organizationalUnitName
+ 92:d=3 hl=2 l= 42 prim: PRINTABLESTRING :http://certificates.godaddy.com/repository
+ 136:d=1 hl=2 l= 48 cons: SET
+ 138:d=2 hl=2 l= 46 cons: SEQUENCE
+ 140:d=3 hl=2 l= 3 prim: OBJECT :commonName
+ 145:d=3 hl=2 l= 39 prim: PRINTABLESTRING :Go Daddy Secure Certification Authority
+ 186:d=1 hl=2 l= 17 cons: SET
+ 188:d=2 hl=2 l= 15 cons: SEQUENCE
+ 190:d=3 hl=2 l= 3 prim: OBJECT :serialNumber
+ 195:d=3 hl=2 l= 8 prim: PRINTABLESTRING :07969287
+-----BEGIN ISSUER-----
+MIHKMQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTE
+aMBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xMzAxBgNVBAsTKmh0dHA6Ly9jZXJ0aWZpY2F0ZX
+MuZ29kYWRkeS5jb20vcmVwb3NpdG9yeTEwMC4GA1UEAxMnR28gRGFkZHkgU2VjdXJlIENlcnRpZ
+mljYXRpb24gQXV0aG9yaXR5MREwDwYDVQQFEwgwNzk2OTI4Nw==
+-----END ISSUER-----
+
+$ openssl asn1parse -i -inform DER < [VALIDITY]
+ 0:d=0 hl=2 l= 30 cons: SEQUENCE
+ 2:d=1 hl=2 l= 13 prim: UTCTIME :120419135324Z
+ 17:d=1 hl=2 l= 13 prim: UTCTIME :130419135324Z
+-----BEGIN VALIDITY-----
+MB4XDTEyMDQxOTEzNTMyNFoXDTEzMDQxOTEzNTMyNFo=
+-----END VALIDITY-----
+
+$ openssl asn1parse -i -inform DER < [SUBJECT]
+ 0:d=0 hl=2 l= 79 cons: SEQUENCE
+ 2:d=1 hl=2 l= 20 cons: SET
+ 4:d=2 hl=2 l= 18 cons: SEQUENCE
+ 6:d=3 hl=2 l= 3 prim: OBJECT :organizationName
+ 11:d=3 hl=2 l= 11 prim: PRINTABLESTRING :kthulhu.net
+ 24:d=1 hl=2 l= 33 cons: SET
+ 26:d=2 hl=2 l= 31 cons: SEQUENCE
+ 28:d=3 hl=2 l= 3 prim: OBJECT :organizationalUnitName
+ 33:d=3 hl=2 l= 24 prim: PRINTABLESTRING :Domain Control Validated
+ 59:d=1 hl=2 l= 20 cons: SET
+ 61:d=2 hl=2 l= 18 cons: SEQUENCE
+ 63:d=3 hl=2 l= 3 prim: OBJECT :commonName
+ 68:d=3 hl=2 l= 11 prim: PRINTABLESTRING :kthulhu.net
+-----BEGIN SUBJECT-----
+ME8xFDASBgNVBAoTC2t0aHVsaHUubmV0MSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF
+0ZWQxFDASBgNVBAMTC2t0aHVsaHUubmV0
+-----END SUBJECT-----
+
+$ openssl asn1parse -i -inform DER < [SPKI]
+ 0:d=0 hl=4 l= 290 cons: SEQUENCE
+ 4:d=1 hl=2 l= 13 cons: SEQUENCE
+ 6:d=2 hl=2 l= 9 prim: OBJECT :rsaEncryption
+ 17:d=2 hl=2 l= 0 prim: NULL
+ 19:d=1 hl=4 l= 271 prim: BIT STRING
+-----BEGIN SPKI-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzQkuEZv5xkNLJ7RCgAYmH4vG87FFPF
+m5J+9ObenNAFqm8V5C4IzXm1+s7ro0sndLOyDH5INNAtKkuqp7kqubl1bbP3Z4+Ra3ENv7cpwQb
+QjoaajRKCGRULs/jFMCAASii/+3jkkufNimu7cBfDXOSQR2YQZL4zhDW7ss/zwTVspYnxvU7oDc
+qOIwCmFwQ/FvYTAxF1uozKBsJfL854v0MKI7GEyyn6W8jZ7f8cSc8ahvrLAYt/etAxrmHcMUVJb
+W+gxXiwJsHfj03S1/RypHTb4gRqEz3pX6wl8sqtJP0L5mXuQgESoEAZ4SrPYLxXytqrU1yLi32x
+gWwHu1A7fIQIDAQAB
+-----END SPKI-----
+
+$ openssl asn1parse -i -inform DER < [EXTENSIONS]
+ 0:d=0 hl=4 l= 438 cons: SEQUENCE
+ 4:d=1 hl=2 l= 15 cons: SEQUENCE
+ 6:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Basic Constraints
+ 11:d=2 hl=2 l= 1 prim: BOOLEAN :255
+ 14:d=2 hl=2 l= 5 prim: OCTET STRING [HEX DUMP]:3003010100
+ 21:d=1 hl=2 l= 29 cons: SEQUENCE
+ 23:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Extended Key Usage
+ 28:d=2 hl=2 l= 22 prim: OCTET STRING [HEX DUMP]:301406082B0601050507030106082B06010505070302
+ 52:d=1 hl=2 l= 14 cons: SEQUENCE
+ 54:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Key Usage
+ 59:d=2 hl=2 l= 1 prim: BOOLEAN :255
+ 62:d=2 hl=2 l= 4 prim: OCTET STRING [HEX DUMP]:030205A0
+ 68:d=1 hl=2 l= 51 cons: SEQUENCE
+ 70:d=2 hl=2 l= 3 prim: OBJECT :X509v3 CRL Distribution Points
+ 75:d=2 hl=2 l= 44 prim: OCTET STRING [HEX DUMP]:302A3028A026A0248622687474703A2F2F63726C2E676F64616464792E636F6D2F676473312D36382E63726C
+ 121:d=1 hl=2 l= 83 cons: SEQUENCE
+ 123:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Certificate Policies
+ 128:d=2 hl=2 l= 76 prim: OCTET STRING [HEX DUMP]:304A3048060B6086480186FD6D010717013039303706082B06010505070201162B687474703A2F2F6365727469666963617465732E676F64616464792E636F6D2F7265706F7369746F72792F
+ 206:d=1 hl=3 l= 128 cons: SEQUENCE
+ 209:d=2 hl=2 l= 8 prim: OBJECT :Authority Information Access
+ 219:d=2 hl=2 l= 116 prim: OCTET STRING [HEX DUMP]:3072302406082B060105050730018618687474703A2F2F6F6373702E676F64616464792E636F6D2F304A06082B06010505073002863E687474703A2F2F6365727469666963617465732E676F64616464792E636F6D2F7265706F7369746F72792F67645F696E7465726D6564696174652E637274
+ 337:d=1 hl=2 l= 31 cons: SEQUENCE
+ 339:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Authority Key Identifier
+ 344:d=2 hl=2 l= 24 prim: OCTET STRING [HEX DUMP]:30168014FDAC6132936C45D6E2EE855F9ABAE7769968CCE7
+ 370:d=1 hl=2 l= 39 cons: SEQUENCE
+ 372:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Subject Alternative Name
+ 377:d=2 hl=2 l= 32 prim: OCTET STRING [HEX DUMP]:301E820B6B7468756C68752E6E6574820F7777772E6B7468756C68752E6E6574
+ 411:d=1 hl=2 l= 29 cons: SEQUENCE
+ 413:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Subject Key Identifier
+ 418:d=2 hl=2 l= 22 prim: OCTET STRING [HEX DUMP]:0414A31E1AB1A9E4F550BC3E05E174CF01D09E35E017
+-----BEGIN EXTENSIONS-----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==
+-----END EXTENSIONS-----
+

Powered by Google App Engine
This is Rietveld 408576698