| OLD | NEW |
| 1 This is a very basic TBSCertificate. It is valid from the perspective of | 1 This is a very basic TBSCertificate. It is valid from the perspective of |
| 2 ParseTbsCertificate(), however its sub-fields are mainly bogus. This | 2 ParseTbsCertificate(), however its sub-fields are mainly bogus. This |
| 3 TBSCertificate contains no optional fields (no issuerUniqueID, subjectUniqueID, | 3 TBSCertificate contains no optional fields (no issuerUniqueID, subjectUniqueID, |
| 4 extensions) | 4 extensions) |
| 5 | 5 |
| 6 | 6 |
| 7 | |
| 8 -----BEGIN TBS CERTIFICATE----- | |
| 9 MDygAwIBAgIBATADBAEBMAMEAQUwHhcNMTIxMDE4MDMxMjAwWhcNMTMxMDE4MTQ1OTU5WjADBAG | |
| 10 DMAMEAfM= | |
| 11 -----END TBS CERTIFICATE----- | |
| 12 | |
| 13 $ openssl asn1parse -i < [TBS CERTIFICATE] | 7 $ openssl asn1parse -i < [TBS CERTIFICATE] |
| 14 0:d=0 hl=2 l= 60 cons: SEQUENCE | 8 0:d=0 hl=2 l= 60 cons: SEQUENCE |
| 15 2:d=1 hl=2 l= 3 cons: cont [ 0 ] | 9 2:d=1 hl=2 l= 3 cons: cont [ 0 ] |
| 16 4:d=2 hl=2 l= 1 prim: INTEGER :02 | 10 4:d=2 hl=2 l= 1 prim: INTEGER :02 |
| 17 7:d=1 hl=2 l= 1 prim: INTEGER :01 | 11 7:d=1 hl=2 l= 1 prim: INTEGER :01 |
| 18 10:d=1 hl=2 l= 3 cons: SEQUENCE | 12 10:d=1 hl=2 l= 3 cons: SEQUENCE |
| 19 12:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 | 13 12:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 |
| 20 15:d=1 hl=2 l= 3 cons: SEQUENCE | 14 15:d=1 hl=2 l= 3 cons: SEQUENCE |
| 21 17:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 | 15 17:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 |
| 22 20:d=1 hl=2 l= 30 cons: SEQUENCE | 16 20:d=1 hl=2 l= 30 cons: SEQUENCE |
| 23 22:d=2 hl=2 l= 13 prim: UTCTIME :121018031200Z | 17 22:d=2 hl=2 l= 13 prim: UTCTIME :121018031200Z |
| 24 37:d=2 hl=2 l= 13 prim: UTCTIME :131018145959Z | 18 37:d=2 hl=2 l= 13 prim: UTCTIME :131018145959Z |
| 25 52:d=1 hl=2 l= 3 cons: SEQUENCE | 19 52:d=1 hl=2 l= 3 cons: SEQUENCE |
| 26 54:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 | 20 54:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 |
| 27 57:d=1 hl=2 l= 3 cons: SEQUENCE | 21 57:d=1 hl=2 l= 3 cons: SEQUENCE |
| 28 59:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 | 22 59:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 |
| 29 | 23 -----BEGIN TBS CERTIFICATE----- |
| 30 | 24 MDygAwIBAgIBATADBAEBMAMEAQUwHhcNMTIxMDE4MDMxMjAwWhcNMTMxMDE4MTQ1OTU5WjADBAG |
| 25 DMAMEAfM= |
| 26 -----END TBS CERTIFICATE----- |
| 31 | 27 |
| 32 -----BEGIN SERIAL NUMBER----- | 28 -----BEGIN SERIAL NUMBER----- |
| 33 AQ== | 29 AQ== |
| 34 -----END SERIAL NUMBER----- | 30 -----END SERIAL NUMBER----- |
| 35 | 31 |
| 36 | 32 $ openssl asn1parse -i < [SIGNATURE ALGORITHM] |
| 37 | 33 0:d=0 hl=2 l= 3 cons: SEQUENCE |
| 34 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 |
| 38 -----BEGIN SIGNATURE ALGORITHM----- | 35 -----BEGIN SIGNATURE ALGORITHM----- |
| 39 MAMEAQE= | 36 MAMEAQE= |
| 40 -----END SIGNATURE ALGORITHM----- | 37 -----END SIGNATURE ALGORITHM----- |
| 41 | 38 |
| 42 $ openssl asn1parse -i < [SIGNATURE ALGORITHM] | 39 $ openssl asn1parse -i < [ISSUER] |
| 43 0:d=0 hl=2 l= 3 cons: SEQUENCE | 40 0:d=0 hl=2 l= 3 cons: SEQUENCE |
| 44 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 | 41 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 |
| 45 | |
| 46 | |
| 47 | |
| 48 -----BEGIN ISSUER----- | 42 -----BEGIN ISSUER----- |
| 49 MAMEAQU= | 43 MAMEAQU= |
| 50 -----END ISSUER----- | 44 -----END ISSUER----- |
| 51 | 45 |
| 52 $ openssl asn1parse -i < [ISSUER] | 46 VALIDITY NOTBEFORE: year=2012, month=10, day=18, hours=3, minutes=12, seconds=0 |
| 53 0:d=0 hl=2 l= 3 cons: SEQUENCE | |
| 54 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 | |
| 55 | |
| 56 | |
| 57 | |
| 58 -----BEGIN VALIDITY NOTBEFORE----- | 47 -----BEGIN VALIDITY NOTBEFORE----- |
| 59 eWVhcj0yMDEyLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0zLCBtaW51dGVzPTEyLCBzZWNvbmR | 48 eWVhcj0yMDEyLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0zLCBtaW51dGVzPTEyLCBzZWNvbmR |
| 60 zPTA= | 49 zPTA= |
| 61 -----END VALIDITY NOTBEFORE----- | 50 -----END VALIDITY NOTBEFORE----- |
| 62 | 51 |
| 63 VALIDITY NOTBEFORE: year=2012, month=10, day=18, hours=3, minutes=12, seconds=0 | 52 VALIDITY NOTAFTER: year=2013, month=10, day=18, hours=14, minutes=59, seconds=59 |
| 64 | |
| 65 | |
| 66 | |
| 67 -----BEGIN VALIDITY NOTAFTER----- | 53 -----BEGIN VALIDITY NOTAFTER----- |
| 68 eWVhcj0yMDEzLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0xNCwgbWludXRlcz01OSwgc2Vjb25 | 54 eWVhcj0yMDEzLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0xNCwgbWludXRlcz01OSwgc2Vjb25 |
| 69 kcz01OQ== | 55 kcz01OQ== |
| 70 -----END VALIDITY NOTAFTER----- | 56 -----END VALIDITY NOTAFTER----- |
| 71 | 57 |
| 72 VALIDITY NOTAFTER: year=2013, month=10, day=18, hours=14, minutes=59, seconds=59 | 58 $ openssl asn1parse -i < [SUBJECT] |
| 73 | 59 0:d=0 hl=2 l= 3 cons: SEQUENCE |
| 74 | 60 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 |
| 75 | |
| 76 -----BEGIN SUBJECT----- | 61 -----BEGIN SUBJECT----- |
| 77 MAMEAYM= | 62 MAMEAYM= |
| 78 -----END SUBJECT----- | 63 -----END SUBJECT----- |
| 79 | 64 |
| 80 $ openssl asn1parse -i < [SUBJECT] | 65 $ openssl asn1parse -i < [SPKI] |
| 81 0:d=0 hl=2 l= 3 cons: SEQUENCE | 66 0:d=0 hl=2 l= 3 cons: SEQUENCE |
| 82 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 | 67 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 |
| 83 | |
| 84 | |
| 85 | |
| 86 -----BEGIN SPKI----- | 68 -----BEGIN SPKI----- |
| 87 MAMEAfM= | 69 MAMEAfM= |
| 88 -----END SPKI----- | 70 -----END SPKI----- |
| 89 | |
| 90 $ openssl asn1parse -i < [SPKI] | |
| 91 0:d=0 hl=2 l= 3 cons: SEQUENCE | |
| 92 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 | |
| OLD | NEW |