| OLD | NEW |
| 1 This is a very basic TBSCertificate. It is valid from the perspective of | 1 This is a very basic TBSCertificate. It is valid from the perspective of |
| 2 ParseTbsCertificate(), however its sub-fields are mainly bogus. This | 2 ParseTbsCertificate(), however its sub-fields are mainly bogus. This |
| 3 TBSCertificate contains extensions. | 3 TBSCertificate contains extensions. |
| 4 | 4 |
| 5 | 5 |
| 6 -----BEGIN TBS CERTIFICATE----- | |
| 7 MEOgAwIBAgIBATADBAEBMAMEAQUwHhcNMTIxMDE4MDMxMjAwWhcNMTMxMDE4MTQ1OTU5WjADBAG | |
| 8 DMAMEAfOjBTADBAHd | |
| 9 -----END TBS CERTIFICATE----- | |
| 10 | |
| 11 $ openssl asn1parse -i < [TBS CERTIFICATE] | 6 $ openssl asn1parse -i < [TBS CERTIFICATE] |
| 12 0:d=0 hl=2 l= 67 cons: SEQUENCE | 7 0:d=0 hl=2 l= 67 cons: SEQUENCE |
| 13 2:d=1 hl=2 l= 3 cons: cont [ 0 ] | 8 2:d=1 hl=2 l= 3 cons: cont [ 0 ] |
| 14 4:d=2 hl=2 l= 1 prim: INTEGER :02 | 9 4:d=2 hl=2 l= 1 prim: INTEGER :02 |
| 15 7:d=1 hl=2 l= 1 prim: INTEGER :01 | 10 7:d=1 hl=2 l= 1 prim: INTEGER :01 |
| 16 10:d=1 hl=2 l= 3 cons: SEQUENCE | 11 10:d=1 hl=2 l= 3 cons: SEQUENCE |
| 17 12:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 | 12 12:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 |
| 18 15:d=1 hl=2 l= 3 cons: SEQUENCE | 13 15:d=1 hl=2 l= 3 cons: SEQUENCE |
| 19 17:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 | 14 17:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 |
| 20 20:d=1 hl=2 l= 30 cons: SEQUENCE | 15 20:d=1 hl=2 l= 30 cons: SEQUENCE |
| 21 22:d=2 hl=2 l= 13 prim: UTCTIME :121018031200Z | 16 22:d=2 hl=2 l= 13 prim: UTCTIME :121018031200Z |
| 22 37:d=2 hl=2 l= 13 prim: UTCTIME :131018145959Z | 17 37:d=2 hl=2 l= 13 prim: UTCTIME :131018145959Z |
| 23 52:d=1 hl=2 l= 3 cons: SEQUENCE | 18 52:d=1 hl=2 l= 3 cons: SEQUENCE |
| 24 54:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 | 19 54:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 |
| 25 57:d=1 hl=2 l= 3 cons: SEQUENCE | 20 57:d=1 hl=2 l= 3 cons: SEQUENCE |
| 26 59:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 | 21 59:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 |
| 27 62:d=1 hl=2 l= 5 cons: cont [ 3 ] | 22 62:d=1 hl=2 l= 5 cons: cont [ 3 ] |
| 28 64:d=2 hl=2 l= 3 cons: SEQUENCE | 23 64:d=2 hl=2 l= 3 cons: SEQUENCE |
| 29 66:d=3 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:DD | 24 66:d=3 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:DD |
| 30 | 25 -----BEGIN TBS CERTIFICATE----- |
| 31 | 26 MEOgAwIBAgIBATADBAEBMAMEAQUwHhcNMTIxMDE4MDMxMjAwWhcNMTMxMDE4MTQ1OTU5WjADBAG |
| 27 DMAMEAfOjBTADBAHd |
| 28 -----END TBS CERTIFICATE----- |
| 32 | 29 |
| 33 -----BEGIN SERIAL NUMBER----- | 30 -----BEGIN SERIAL NUMBER----- |
| 34 AQ== | 31 AQ== |
| 35 -----END SERIAL NUMBER----- | 32 -----END SERIAL NUMBER----- |
| 36 | 33 |
| 37 | 34 $ openssl asn1parse -i < [SIGNATURE ALGORITHM] |
| 38 | 35 0:d=0 hl=2 l= 3 cons: SEQUENCE |
| 36 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 |
| 39 -----BEGIN SIGNATURE ALGORITHM----- | 37 -----BEGIN SIGNATURE ALGORITHM----- |
| 40 MAMEAQE= | 38 MAMEAQE= |
| 41 -----END SIGNATURE ALGORITHM----- | 39 -----END SIGNATURE ALGORITHM----- |
| 42 | 40 |
| 43 $ openssl asn1parse -i < [SIGNATURE ALGORITHM] | 41 $ openssl asn1parse -i < [ISSUER] |
| 44 0:d=0 hl=2 l= 3 cons: SEQUENCE | 42 0:d=0 hl=2 l= 3 cons: SEQUENCE |
| 45 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 | 43 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 |
| 46 | |
| 47 | |
| 48 | |
| 49 -----BEGIN ISSUER----- | 44 -----BEGIN ISSUER----- |
| 50 MAMEAQU= | 45 MAMEAQU= |
| 51 -----END ISSUER----- | 46 -----END ISSUER----- |
| 52 | 47 |
| 53 $ openssl asn1parse -i < [ISSUER] | 48 VALIDITY NOTBEFORE: year=2012, month=10, day=18, hours=3, minutes=12, seconds=0 |
| 54 0:d=0 hl=2 l= 3 cons: SEQUENCE | |
| 55 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 | |
| 56 | |
| 57 | |
| 58 | |
| 59 -----BEGIN VALIDITY NOTBEFORE----- | 49 -----BEGIN VALIDITY NOTBEFORE----- |
| 60 eWVhcj0yMDEyLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0zLCBtaW51dGVzPTEyLCBzZWNvbmR | 50 eWVhcj0yMDEyLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0zLCBtaW51dGVzPTEyLCBzZWNvbmR |
| 61 zPTA= | 51 zPTA= |
| 62 -----END VALIDITY NOTBEFORE----- | 52 -----END VALIDITY NOTBEFORE----- |
| 63 | 53 |
| 64 VALIDITY NOTBEFORE: year=2012, month=10, day=18, hours=3, minutes=12, seconds=0 | 54 VALIDITY NOTAFTER: year=2013, month=10, day=18, hours=14, minutes=59, seconds=59 |
| 65 | |
| 66 | |
| 67 | |
| 68 -----BEGIN VALIDITY NOTAFTER----- | 55 -----BEGIN VALIDITY NOTAFTER----- |
| 69 eWVhcj0yMDEzLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0xNCwgbWludXRlcz01OSwgc2Vjb25 | 56 eWVhcj0yMDEzLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0xNCwgbWludXRlcz01OSwgc2Vjb25 |
| 70 kcz01OQ== | 57 kcz01OQ== |
| 71 -----END VALIDITY NOTAFTER----- | 58 -----END VALIDITY NOTAFTER----- |
| 72 | 59 |
| 73 VALIDITY NOTAFTER: year=2013, month=10, day=18, hours=14, minutes=59, seconds=59 | 60 $ openssl asn1parse -i < [SUBJECT] |
| 74 | 61 0:d=0 hl=2 l= 3 cons: SEQUENCE |
| 75 | 62 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 |
| 76 | |
| 77 -----BEGIN SUBJECT----- | 63 -----BEGIN SUBJECT----- |
| 78 MAMEAYM= | 64 MAMEAYM= |
| 79 -----END SUBJECT----- | 65 -----END SUBJECT----- |
| 80 | 66 |
| 81 $ openssl asn1parse -i < [SUBJECT] | 67 $ openssl asn1parse -i < [SPKI] |
| 82 0:d=0 hl=2 l= 3 cons: SEQUENCE | 68 0:d=0 hl=2 l= 3 cons: SEQUENCE |
| 83 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 | 69 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 |
| 84 | |
| 85 | |
| 86 | |
| 87 -----BEGIN SPKI----- | 70 -----BEGIN SPKI----- |
| 88 MAMEAfM= | 71 MAMEAfM= |
| 89 -----END SPKI----- | 72 -----END SPKI----- |
| 90 | 73 |
| 91 $ openssl asn1parse -i < [SPKI] | 74 $ openssl asn1parse -i < [EXTENSIONS] |
| 92 0:d=0 hl=2 l= 3 cons: SEQUENCE | 75 0:d=0 hl=2 l= 3 cons: SEQUENCE |
| 93 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 | 76 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:DD |
| 94 | |
| 95 | |
| 96 | |
| 97 -----BEGIN EXTENSIONS----- | 77 -----BEGIN EXTENSIONS----- |
| 98 MAMEAd0= | 78 MAMEAd0= |
| 99 -----END EXTENSIONS----- | 79 -----END EXTENSIONS----- |
| 100 | |
| 101 $ openssl asn1parse -i < [EXTENSIONS] | |
| 102 0:d=0 hl=2 l= 3 cons: SEQUENCE | |
| 103 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:DD | |
| OLD | NEW |