OLD | NEW |
1 A real world extensions sequence (taken from Google's GAI2). | 1 A real world extensions sequence (taken from Google's GAI2). |
2 | 2 |
| 3 #-----BEGIN EXTENSIONS----- |
| 4 SEQUENCE { |
| 5 SEQUENCE { |
| 6 # authorityKeyIdentifier |
| 7 OBJECT_IDENTIFIER { 2.5.29.35 } |
| 8 OCTET_STRING { |
| 9 SEQUENCE { |
| 10 [0 PRIMITIVE] { `c07a98688d89fbab05640c117daa7d65b8cacc4e` } |
| 11 } |
| 12 } |
| 13 } |
| 14 SEQUENCE { |
| 15 # subjectKeyIdentifier |
| 16 OBJECT_IDENTIFIER { 2.5.29.14 } |
| 17 OCTET_STRING { |
| 18 OCTET_STRING { `4add06161bbcf668b576f581b6bb621aba5a812f` } |
| 19 } |
| 20 } |
| 21 SEQUENCE { |
| 22 # keyUsage |
| 23 OBJECT_IDENTIFIER { 2.5.29.15 } |
| 24 BOOLEAN { `ff` } |
| 25 OCTET_STRING { |
| 26 BIT_STRING { `0106` } |
| 27 } |
| 28 } |
| 29 SEQUENCE { |
| 30 # authorityInfoAccess |
| 31 OBJECT_IDENTIFIER { 1.3.6.1.5.5.7.1.1 } |
| 32 OCTET_STRING { |
| 33 SEQUENCE { |
| 34 SEQUENCE { |
| 35 # ocsp |
| 36 OBJECT_IDENTIFIER { 1.3.6.1.5.5.7.48.1 } |
| 37 [6 PRIMITIVE] { "http://g.symcd.com" } |
| 38 } |
| 39 } |
| 40 } |
| 41 } |
| 42 SEQUENCE { |
| 43 # basicConstraints |
| 44 OBJECT_IDENTIFIER { 2.5.29.19 } |
| 45 BOOLEAN { `ff` } |
| 46 OCTET_STRING { |
| 47 SEQUENCE { |
| 48 BOOLEAN { `ff` } |
| 49 INTEGER { 0 } |
| 50 } |
| 51 } |
| 52 } |
| 53 SEQUENCE { |
| 54 # cRLDistributionPoints |
| 55 OBJECT_IDENTIFIER { 2.5.29.31 } |
| 56 OCTET_STRING { |
| 57 SEQUENCE { |
| 58 SEQUENCE { |
| 59 [0] { |
| 60 [0] { |
| 61 [6 PRIMITIVE] { "http://g.symcb.com/crls/gtglobal.crl" } |
| 62 } |
| 63 } |
| 64 } |
| 65 } |
| 66 } |
| 67 } |
| 68 SEQUENCE { |
| 69 # certificatePolicies |
| 70 OBJECT_IDENTIFIER { 2.5.29.32 } |
| 71 OCTET_STRING { |
| 72 SEQUENCE { |
| 73 SEQUENCE { |
| 74 OBJECT_IDENTIFIER { 1.3.6.1.4.1.11129.2.5.1 } |
| 75 } |
| 76 } |
| 77 } |
| 78 } |
| 79 } |
| 80 #-----END EXTENSIONS----- |
3 | 81 |
4 $ openssl asn1parse -i < [EXTENSIONS] | 82 |
5 0:d=0 hl=3 l= 228 cons: SEQUENCE | 83 -----BEGIN CERTIFICATE----- |
6 3:d=1 hl=2 l= 31 cons: SEQUENCE | 84 MIIC8DCCAlmgAwIBAgIJAPuwTC6rEJsMMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNVBAYTAkFVMRMwEQYD
VQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQwHhcNMTQwNDIz
MjA1MDQwWhcNMTcwNDIyMjA1MDQwWjBFMQswCQYDVQQGEwJBVTETMBEGA1UECAwKU29tZS1TdGF0ZTEh
MB8GA1UECgwYSW50ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
gQDYK8imMuRi/03z0K1Zi0WnvfFHvwlYeyK9Na6XJYaUoIDAtB92kWdGMdAQhLciHnAjkXLI6W15OoV3
gA/ElRZ1xUpxTMhjP6PyY5wqT5r6y8FxbiiFKKAnHmUcrgfVW28tQ+0rkLGMryRtrukXOgXBv7gcrmU7
G1jC2a7WqmeI8QIDAQABo4HnMIHkMB8GA1UdIwQYMBaAFMB6mGiNifurBWQMEX2qfWW4ysxOMB0GA1Ud
DgQWBBRK3QYWG7z2aLV29YG2u2IaulqBLzAOBgNVHQ8BAf8EBAMCAQYwLgYIKwYBBQUHAQEEIjAgMB4G
CCsGAQUFBzABhhJodHRwOi8vZy5zeW1jZC5jb20wEgYDVR0TAQH/BAgwBgEB/wIBADA1BgNVHR8ELjAs
MCqgKKAmhiRodHRwOi8vZy5zeW1jYi5jb20vY3Jscy9ndGdsb2JhbC5jcmwwFwYDVR0gBBAwDjAMBgor
BgEEAdZ5AgUBMA0GCSqGSIb3DQEBBQUAA4GBADvoeG2V1j1q9xMZLBvCiK4iq/SNMvV8cWfPLdEcwsOH
4um+iVzkNKtIkcI/la4rR54leGtPmhCkcv3P9wIMsAoIpFri5XR+ER05YGrJH2nzLmMm3J7va3oK4VRX
mKpykXgEfh+PZU0fCxKsnCQPhBQaVS0fu/CdCbIIXFkyZYAm |
7 5:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Authority Key Identifie
r | 85 -----END CERTIFICATE----- |
8 10:d=2 hl=2 l= 24 prim: OCTET STRING [HEX DUMP]:30168014C07A98688D89
FBAB05640C117DAA7D65B8CACC4E | |
9 36:d=1 hl=2 l= 29 cons: SEQUENCE | |
10 38:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Subject Key Identifier | |
11 43:d=2 hl=2 l= 22 prim: OCTET STRING [HEX DUMP]:04144ADD06161BBCF668
B576F581B6BB621ABA5A812F | |
12 67:d=1 hl=2 l= 14 cons: SEQUENCE | |
13 69:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Key Usage | |
14 74:d=2 hl=2 l= 1 prim: BOOLEAN :255 | |
15 77:d=2 hl=2 l= 4 prim: OCTET STRING [HEX DUMP]:03020106 | |
16 83:d=1 hl=2 l= 46 cons: SEQUENCE | |
17 85:d=2 hl=2 l= 8 prim: OBJECT :Authority Information Access | |
18 95:d=2 hl=2 l= 34 prim: OCTET STRING [HEX DUMP]:3020301E06082B060105
050730018612687474703A2F2F672E73796D63642E636F6D | |
19 131:d=1 hl=2 l= 18 cons: SEQUENCE | |
20 133:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Basic Constraints | |
21 138:d=2 hl=2 l= 1 prim: BOOLEAN :255 | |
22 141:d=2 hl=2 l= 8 prim: OCTET STRING [HEX DUMP]:30060101FF020100 | |
23 151:d=1 hl=2 l= 53 cons: SEQUENCE | |
24 153:d=2 hl=2 l= 3 prim: OBJECT :X509v3 CRL Distribution Points | |
25 158:d=2 hl=2 l= 46 prim: OCTET STRING [HEX DUMP]:302C302AA028A0268624
687474703A2F2F672E73796D63622E636F6D2F63726C732F6774676C6F62616C2E63726C | |
26 206:d=1 hl=2 l= 23 cons: SEQUENCE | |
27 208:d=2 hl=2 l= 3 prim: OBJECT :X509v3 Certificate Policies | |
28 213:d=2 hl=2 l= 16 prim: OCTET STRING [HEX DUMP]:300E300C060A2B060104
01D679020501 | |
29 -----BEGIN EXTENSIONS----- | |
30 MIHkMB8GA1UdIwQYMBaAFMB6mGiNifurBWQMEX2qfWW4ysxOMB0GA1UdDgQWBBRK3QYWG7z2aLV | |
31 29YG2u2IaulqBLzAOBgNVHQ8BAf8EBAMCAQYwLgYIKwYBBQUHAQEEIjAgMB4GCCsGAQUFBzABhh | |
32 JodHRwOi8vZy5zeW1jZC5jb20wEgYDVR0TAQH/BAgwBgEB/wIBADA1BgNVHR8ELjAsMCqgKKAmh | |
33 iRodHRwOi8vZy5zeW1jYi5jb20vY3Jscy9ndGdsb2JhbC5jcmwwFwYDVR0gBBAwDjAMBgorBgEE | |
34 AdZ5AgUB | |
35 -----END EXTENSIONS----- | |
OLD | NEW |