OLD | NEW |
1 This is a basic constraints extension, where the critical field (BOOLEAN) is 3. | 1 This is an unknown extension, where the critical field (BOOLEAN) is 3. |
2 | 2 |
3 This is not valid because BOOLEANs in DER-encoding should use an octet of | 3 This is not valid because BOOLEANs in DER-encoding should use an octet of |
4 either all 0 bits or all 1 bits. | 4 either all 0 bits or all 1 bits. |
5 | 5 |
| 6 #-----BEGIN EXTENSION----- |
| 7 SEQUENCE { |
| 8 # https://davidben.net/oid |
| 9 OBJECT_IDENTIFIER { 1.2.840.113554.4.1.72585.0 } |
| 10 BOOLEAN { `03` } |
| 11 OCTET_STRING { |
| 12 SEQUENCE {} |
| 13 } |
| 14 } |
| 15 #-----END EXTENSION----- |
6 | 16 |
7 $ openssl asn1parse -i < [EXTENSION] | 17 |
8 0:d=0 hl=2 l= 12 cons: SEQUENCE | 18 -----BEGIN CERTIFICATE----- |
9 2:d=1 hl=2 l= 3 prim: OBJECT :X509v3 Basic Constraints | 19 MIICbzCCAdigAwIBAgIJAPuwTC6rEJsMMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNVBAYTAkFVMRMwEQYD
VQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQwHhcNMTQwNDIz
MjA1MDQwWhcNMTcwNDIyMjA1MDQwWjBFMQswCQYDVQQGEwJBVTETMBEGA1UECAwKU29tZS1TdGF0ZTEh
MB8GA1UECgwYSW50ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
gQDYK8imMuRi/03z0K1Zi0WnvfFHvwlYeyK9Na6XJYaUoIDAtB92kWdGMdAQhLciHnAjkXLI6W15OoV3
gA/ElRZ1xUpxTMhjP6PyY5wqT5r6y8FxbiiFKKAnHmUcrgfVW28tQ+0rkLGMryRtrukXOgXBv7gcrmU7
G1jC2a7WqmeI8QIDAQABo2cwZTAdBgNVHQ4EFgQUi3XVrMsIvg4fZbf6Vr5sp3Xaha8wHwYDVR0jBBgw
FoAUi3XVrMsIvg4fZbf6Vr5sp3Xaha8wDAYDVR0TBAUwAwEB/zAVBgwqhkiG9xIEAYS3CQABAQMEAjAA
MA0GCSqGSIb3DQEBBQUAA4GBADvoeG2V1j1q9xMZLBvCiK4iq/SNMvV8cWfPLdEcwsOH4um+iVzkNKtI
kcI/la4rR54leGtPmhCkcv3P9wIMsAoIpFri5XR+ER05YGrJH2nzLmMm3J7va3oK4VRXmKpykXgEfh+P
ZU0fCxKsnCQPhBQaVS0fu/CdCbIIXFkyZYAm |
10 7:d=1 hl=2 l= 1 prim: BOOLEAN :3 | 20 -----END CERTIFICATE----- |
11 10:d=1 hl=2 l= 2 prim: OCTET STRING [HEX DUMP]:3000 | |
12 -----BEGIN EXTENSION----- | |
13 MAwGA1UdEwEBAwQCMAA= | |
14 -----END EXTENSION----- | |
OLD | NEW |