Skip to content

Commit ba8e50b

Browse files
peppelinuxpeppelinux
committed
chore: moved x509 chain in a separate file
1 parent 0aa2d3c commit ba8e50b

File tree

2 files changed

+182
-184
lines changed

2 files changed

+182
-184
lines changed

‎docs/en/trust.rst

Lines changed: 2 additions & 184 deletions
Original file line numberDiff line numberDiff line change
@@ -804,190 +804,8 @@ When a participant self-issues an X.509 Certificate, it adheres to the following
804804

805805
Below a non-normative example in plain text (OpenSSL format) of an X.509 Certificate Chain with an intermediary, starting from the leaf certificate.
806806

807-
808-
.. code-block:: text
809-
810-
Certificate:
811-
Data:
812-
Version: 3 (0x2)
813-
Serial Number: 631900975802917176051117802358049194750736752223 (0x6eaf6b7456ab3c0a4b38f02bb6073db7ce925e5f)
814-
Signature Algorithm: sha256
815-
Issuer: commonName=https://intermediate.example.net, organizationName=Example INT, countryName=IT
816-
Validity
817-
Not Before: May 27 09:13:33 2025 GMT
818-
Not After : May 28 09:13:33 2026 GMT
819-
Subject: commonName=CN=leaf.example.com, O=Example Leaf, C=IT, organizationName=Example Leaf, countryName=IT
820-
Subject Public Key Info:
821-
Public Key Algorithm: id-ecPublicKey (EC)
822-
Public-Key: (256 bit)
823-
Curve: secp256r1
824-
X: 69976109031737194756970051761651042204906873292535726068007861307666294009468
825-
Y: 30041520431409736411496718565679258429461229569083348196905050642324938424017
826-
X509v3 extensions:
827-
X509v3 Basic Constraints:
828-
CA:TRUE, pathlen:0
829-
X509v3 Subject Alternative Name:
830-
DNS:leaf.example.org
831-
URI:leaf.example.org
832-
X509v3 Key Usage:
833-
Digital Signature, Key Encipherment, Certificate Sign, CRL Sign
834-
X509v3 CRL Distribution Points:
835-
Full Name:
836-
URI:https://leaf.example.com/crl/leaf.example.com.crl
837-
X509v3 Name Constraints:
838-
Permitted:
839-
URI.1=https://leaf.example.com
840-
DNS.2=leaf.example.com
841-
Excluded:
842-
DNS.1=localhost
843-
DNS.2=localhost.localdomain
844-
DNS.3=127.0.0.1
845-
DNS.4=example.com
846-
DNS.5=example.org
847-
DNS.6=example.net
848-
849-
Signature Algorithm: sha256
850-
30:45:02:21:00:ee:0c:24:4c:ea:57:db:f8:54:68:77
851-
92:bd:d7:e3:3d:ec:80:4e:84:b4:36:70:f3:00:0b:f0
852-
cf:bf:07:c1:4a:02:20:70:1e:12:e4:c4:97:ba:95:36
853-
e8:20:82:d6:f1:7f:4d:0d:41:4a:51:0a:c5:b2:5d:62
854-
33:45:c5:b0:dc:28:0a
855-
856-
-----BEGIN CERTIFICATE-----
857-
MIIC6jCCApCgAwIBAgIUbq9rdFarPApLOPArtgc9t86SXl8wCgYIKoZIzj0EAwIw
858-
TjEpMCcGA1UEAwwgaHR0cHM6Ly9pbnRlcm1lZGlhdGUuZXhhbXBsZS5uZXQxFDAS
859-
BgNVBAoMC0V4YW1wbGUgSU5UMQswCQYDVQQGEwJJVDAeFw0yNTA1MjcwOTEzMzNa
860-
Fw0yNjA1MjgwOTEzMzNaMFgxMjAwBgNVBAMMKUNOPWxlYWYuZXhhbXBsZS5jb20s
861-
IE89RXhhbXBsZSBMZWFmLCBDPUlUMRUwEwYDVQQKDAxFeGFtcGxlIExlYWYxCzAJ
862-
BgNVBAYTAklUMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEmrUS/DeI3q5nTl0y
863-
U5nmAydnP8U4VQxoLb5EVXgCbnxCauXjmhQKpwjlACbOXY7iCBgdqq+1g8OWqMg2
864-
o5H+0aOCAUAwggE8MBIGA1UdEwEB/wQIMAYBAf8CAQAwLQYDVR0RBCYwJIIQbGVh
865-
Zi5leGFtcGxlLm9yZ4YQbGVhZi5leGFtcGxlLm9yZzAOBgNVHQ8BAf8EBAMCAaYw
866-
QgYDVR0fBDswOTA3oDWgM4YxaHR0cHM6Ly9sZWFmLmV4YW1wbGUuY29tL2NybC9s
867-
ZWFmLmV4YW1wbGUuY29tLmNybDCBogYDVR0eAQH/BIGXMIGUoDAwGoYYaHR0cHM6
868-
Ly9sZWFmLmV4YW1wbGUuY29tMBKCEGxlYWYuZXhhbXBsZS5jb22hYDALgglsb2Nh
869-
bGhvc3QwF4IVbG9jYWxob3N0LmxvY2FsZG9tYWluMAuCCTEyNy4wLjAuMTANggtl
870-
eGFtcGxlLmNvbTANggtleGFtcGxlLm9yZzANggtleGFtcGxlLm5ldDAKBggqhkjO
871-
PQQDAgNIADBFAiEA7gwkTOpX2/hUaHeSvdfjPeyAToS0NnDzAAvwz78HwUoCIHAe
872-
EuTEl7qVNugggtbxf00NQUpRCsWyXWIzRcWw3CgK
873-
-----END CERTIFICATE-----
874-
875-
Certificate:
876-
Data:
877-
Version: 3 (0x2)
878-
Serial Number: 396534572491127113022787686743653095280228078403 (0x457539a6ac314749fa5ec658f76ed225fd769343)
879-
Signature Algorithm: sha256
880-
Issuer: commonName=CN=ca.example.com, O=Example CA, C=IT, organizationName=Example CA, countryName=IT
881-
Validity
882-
Not Before: May 27 09:13:33 2025 GMT
883-
Not After : May 28 09:13:33 2026 GMT
884-
Subject: commonName=https://intermediate.example.net, organizationName=Example INT, countryName=IT
885-
Subject Public Key Info:
886-
Public Key Algorithm: id-ecPublicKey (EC)
887-
Public-Key: (256 bit)
888-
Curve: secp256r1
889-
X: 25156074883156693989891139993064608529947553342874167037412394938695986639833
890-
Y: 37747901399770759266458300753958501018530290808445029579181649667235295170256
891-
X509v3 extensions:
892-
X509v3 Basic Constraints:
893-
CA:TRUE, pathlen:1
894-
X509v3 Key Usage:
895-
Digital Signature, Key Encipherment, Certificate Sign, CRL Sign
896-
X509v3 CRL Distribution Points:
897-
Full Name:
898-
URI:https://intermediate.example.net/crl/intermediate.example.net.crl
899-
X509v3 Name Constraints:
900-
Excluded:
901-
DNS.1=localhost
902-
DNS.2=localhost.localdomain
903-
DNS.3=127.0.0.1
904-
DNS.4=example.com
905-
DNS.5=example.org
906-
DNS.6=example.net
907-
908-
Signature Algorithm: sha256
909-
30:46:02:21:00:cb:1d:01:ee:1b:bf:a1:4d:36:42:d2
910-
0a:7e:80:37:44:e6:e0:ae:6c:70:58:ea:4c:60:00:af
911-
53:3b:11:f6:66:02:21:00:c6:08:73:d8:45:7e:e8:e9
912-
5e:be:5b:68:9e:12:e9:a2:8e:95:31:01:1d:9e:99:04
913-
17:d3:f3:54:71:1b:9f:ac
914-
915-
-----BEGIN CERTIFICATE-----
916-
MIICjzCCAjSgAwIBAgIURXU5pqwxR0n6XsZY927SJf12k0MwCgYIKoZIzj0EAwIw
917-
UjEuMCwGA1UEAwwlQ049Y2EuZXhhbXBsZS5jb20sIE89RXhhbXBsZSBDQSwgQz1J
918-
VDETMBEGA1UECgwKRXhhbXBsZSBDQTELMAkGA1UEBhMCSVQwHhcNMjUwNTI3MDkx
919-
MzMzWhcNMjYwNTI4MDkxMzMzWjBOMSkwJwYDVQQDDCBodHRwczovL2ludGVybWVk
920-
aWF0ZS5leGFtcGxlLm5ldDEUMBIGA1UECgwLRXhhbXBsZSBJTlQxCzAJBgNVBAYT
921-
AklUMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEN53VdNZrwDIEoleHOjbgNAA9
922-
Ab6PeLajowvmkPNm89lTdI4YecjNJYS35wyhMEt+opXZukysBjRRO84M8I6O0KOB
923-
6zCB6DASBgNVHRMBAf8ECDAGAQH/AgEBMA4GA1UdDwEB/wQEAwIBpjBSBgNVHR8E
924-
SzBJMEegRaBDhkFodHRwczovL2ludGVybWVkaWF0ZS5leGFtcGxlLm5ldC9jcmwv
925-
aW50ZXJtZWRpYXRlLmV4YW1wbGUubmV0LmNybDBuBgNVHR4BAf8EZDBioWAwC4IJ
926-
bG9jYWxob3N0MBeCFWxvY2FsaG9zdC5sb2NhbGRvbWFpbjALggkxMjcuMC4wLjEw
927-
DYILZXhhbXBsZS5jb20wDYILZXhhbXBsZS5vcmcwDYILZXhhbXBsZS5uZXQwCgYI
928-
KoZIzj0EAwIDSQAwRgIhAMsdAe4bv6FNNkLSCn6AN0Tm4K5scFjqTGAAr1M7EfZm
929-
AiEAxghz2EV+6OlevltonhLpoo6VMQEdnpkEF9PzVHEbn6w=
930-
-----END CERTIFICATE-----
931-
932-
Certificate:
933-
Data:
934-
Version: 3 (0x2)
935-
Serial Number: 284423255585370380375410701638165198317432410917 (0x31d1fad9752ce503dbbacd0bf76abc930d651325)
936-
Signature Algorithm: sha256
937-
Issuer: commonName=CN=ca.example.com, O=Example CA, C=IT, organizationName=Example CA, countryName=IT
938-
Validity
939-
Not Before: May 27 09:13:33 2025 GMT
940-
Not After : May 28 09:13:33 2026 GMT
941-
Subject: commonName=CN=ca.example.com, O=Example CA, C=IT, organizationName=Example CA, countryName=IT
942-
Subject Public Key Info:
943-
Public Key Algorithm: id-ecPublicKey (EC)
944-
Public-Key: (256 bit)
945-
Curve: secp256r1
946-
X: 7607860515366991947250115130866123391572079251785604713950047686319787674406
947-
Y: 74493290682810963932331564302963289249956540428755890573822716633130571216251
948-
X509v3 extensions:
949-
X509v3 Basic Constraints:
950-
CA:TRUE, pathlen:2
951-
X509v3 Subject Alternative Name:
952-
DNS:ca.example.com
953-
X509v3 Key Usage:
954-
Digital Signature, Key Encipherment, Certificate Sign, CRL Sign
955-
X509v3 CRL Distribution Points:
956-
Full Name:
957-
URI:https://ca.example.com/crl/ca.example.com.crl
958-
X509v3 Name Constraints:
959-
Excluded:
960-
DNS.1=localhost
961-
DNS.2=localhost.localdomain
962-
DNS.3=127.0.0.1
963-
DNS.4=example.com
964-
DNS.5=example.org
965-
DNS.6=example.net
966-
967-
Signature Algorithm: sha256
968-
30:46:02:21:00:b9:6c:2c:6f:9a:18:b8:04:d6:39:d3
969-
50:dd:e6:a6:ce:9b:f0:d8:64:48:7b:4b:33:2e:fe:d9
970-
3d:13:81:4c:d4:02:21:00:ab:10:9d:f1:0f:64:d8:dc
971-
76:53:d1:e3:32:b1:65:b7:97:83:d7:69:0f:5a:da:9b
972-
1e:a4:a9:a3:88:98:6b:5f
973-
974-
-----BEGIN CERTIFICATE-----
975-
MIICmjCCAj+gAwIBAgIUMdH62XUs5QPbus0L92q8kw1lEyUwCgYIKoZIzj0EAwIw
976-
UjEuMCwGA1UEAwwlQ049Y2EuZXhhbXBsZS5jb20sIE89RXhhbXBsZSBDQSwgQz1J
977-
VDETMBEGA1UECgwKRXhhbXBsZSBDQTELMAkGA1UEBhMCSVQwHhcNMjUwNTI3MDkx
978-
MzMzWhcNMjYwNTI4MDkxMzMzWjBSMS4wLAYDVQQDDCVDTj1jYS5leGFtcGxlLmNv
979-
bSwgTz1FeGFtcGxlIENBLCBDPUlUMRMwEQYDVQQKDApFeGFtcGxlIENBMQswCQYD
980-
VQQGEwJJVDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABBDR5X4r9VUDnU5X2rIf
981-
xDo7DFNodgP2AD4jzqrETwsmpLG1V9s1bu+zyFrnGVvKmoqR0kOeZ1/vyN5vhMcx
982-
NXujgfIwge8wEgYDVR0TAQH/BAgwBgEB/wIBAjAZBgNVHREEEjAQgg5jYS5leGFt
983-
cGxlLmNvbTAOBgNVHQ8BAf8EBAMCAaYwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cHM6
984-
Ly9jYS5leGFtcGxlLmNvbS9jcmwvY2EuZXhhbXBsZS5jb20uY3JsMG4GA1UdHgEB
985-
/wRkMGKhYDALgglsb2NhbGhvc3QwF4IVbG9jYWxob3N0LmxvY2FsZG9tYWluMAuC
986-
CTEyNy4wLjAuMTANggtleGFtcGxlLmNvbTANggtleGFtcGxlLm9yZzANggtleGFt
987-
cGxlLm5ldDAKBggqhkjOPQQDAgNJADBGAiEAuWwsb5oYuATWOdNQ3eamzpvw2GRI
988-
e0szLv7ZPROBTNQCIQCrEJ3xD2TY3HZT0eMysWW3l4PXaQ9a2psepKmjiJhrXw==
989-
-----END CERTIFICATE-----
990-
807+
.. literalinclude:: ../../examples/x5c.json
808+
:language: JSON
991809

992810
Using the underlying layer established with OpenID Federation 1.0, all X.509 certificates are issued in a properly decentralized manner using the delegation pattern.
993811

‎examples/x5c.json

Lines changed: 180 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,180 @@
1+
Certificate:
2+
Data:
3+
Version: 3 (0x2)
4+
Serial Number: 631900975802917176051117802358049194750736752223 (0x6eaf6b7456ab3c0a4b38f02bb6073db7ce925e5f)
5+
Signature Algorithm: sha256
6+
Issuer: commonName=https://intermediate.example.net, organizationName=Example INT, countryName=IT
7+
Validity
8+
Not Before: May 27 09:13:33 2025 GMT
9+
Not After : May 28 09:13:33 2026 GMT
10+
Subject: commonName=CN=leaf.example.com, O=Example Leaf, C=IT, organizationName=Example Leaf, countryName=IT
11+
Subject Public Key Info:
12+
Public Key Algorithm: id-ecPublicKey (EC)
13+
Public-Key: (256 bit)
14+
Curve: secp256r1
15+
X: 69976109031737194756970051761651042204906873292535726068007861307666294009468
16+
Y: 30041520431409736411496718565679258429461229569083348196905050642324938424017
17+
X509v3 extensions:
18+
X509v3 Basic Constraints:
19+
CA:TRUE, pathlen:0
20+
X509v3 Subject Alternative Name:
21+
DNS:leaf.example.org
22+
URI:leaf.example.org
23+
X509v3 Key Usage:
24+
Digital Signature, Key Encipherment, Certificate Sign, CRL Sign
25+
X509v3 CRL Distribution Points:
26+
Full Name:
27+
URI:https://leaf.example.com/crl/leaf.example.com.crl
28+
X509v3 Name Constraints:
29+
Permitted:
30+
URI.1=https://leaf.example.com
31+
DNS.2=leaf.example.com
32+
Excluded:
33+
DNS.1=localhost
34+
DNS.2=localhost.localdomain
35+
DNS.3=127.0.0.1
36+
DNS.4=example.com
37+
DNS.5=example.org
38+
DNS.6=example.net
39+
40+
Signature Algorithm: sha256
41+
30:45:02:21:00:ee:0c:24:4c:ea:57:db:f8:54:68:77
42+
92:bd:d7:e3:3d:ec:80:4e:84:b4:36:70:f3:00:0b:f0
43+
cf:bf:07:c1:4a:02:20:70:1e:12:e4:c4:97:ba:95:36
44+
e8:20:82:d6:f1:7f:4d:0d:41:4a:51:0a:c5:b2:5d:62
45+
33:45:c5:b0:dc:28:0a
46+
47+
-----BEGIN CERTIFICATE-----
48+
MIIC6jCCApCgAwIBAgIUbq9rdFarPApLOPArtgc9t86SXl8wCgYIKoZIzj0EAwIw
49+
TjEpMCcGA1UEAwwgaHR0cHM6Ly9pbnRlcm1lZGlhdGUuZXhhbXBsZS5uZXQxFDAS
50+
BgNVBAoMC0V4YW1wbGUgSU5UMQswCQYDVQQGEwJJVDAeFw0yNTA1MjcwOTEzMzNa
51+
Fw0yNjA1MjgwOTEzMzNaMFgxMjAwBgNVBAMMKUNOPWxlYWYuZXhhbXBsZS5jb20s
52+
IE89RXhhbXBsZSBMZWFmLCBDPUlUMRUwEwYDVQQKDAxFeGFtcGxlIExlYWYxCzAJ
53+
BgNVBAYTAklUMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEmrUS/DeI3q5nTl0y
54+
U5nmAydnP8U4VQxoLb5EVXgCbnxCauXjmhQKpwjlACbOXY7iCBgdqq+1g8OWqMg2
55+
o5H+0aOCAUAwggE8MBIGA1UdEwEB/wQIMAYBAf8CAQAwLQYDVR0RBCYwJIIQbGVh
56+
Zi5leGFtcGxlLm9yZ4YQbGVhZi5leGFtcGxlLm9yZzAOBgNVHQ8BAf8EBAMCAaYw
57+
QgYDVR0fBDswOTA3oDWgM4YxaHR0cHM6Ly9sZWFmLmV4YW1wbGUuY29tL2NybC9s
58+
ZWFmLmV4YW1wbGUuY29tLmNybDCBogYDVR0eAQH/BIGXMIGUoDAwGoYYaHR0cHM6
59+
Ly9sZWFmLmV4YW1wbGUuY29tMBKCEGxlYWYuZXhhbXBsZS5jb22hYDALgglsb2Nh
60+
bGhvc3QwF4IVbG9jYWxob3N0LmxvY2FsZG9tYWluMAuCCTEyNy4wLjAuMTANggtl
61+
eGFtcGxlLmNvbTANggtleGFtcGxlLm9yZzANggtleGFtcGxlLm5ldDAKBggqhkjO
62+
PQQDAgNIADBFAiEA7gwkTOpX2/hUaHeSvdfjPeyAToS0NnDzAAvwz78HwUoCIHAe
63+
EuTEl7qVNugggtbxf00NQUpRCsWyXWIzRcWw3CgK
64+
-----END CERTIFICATE-----
65+
66+
Certificate:
67+
Data:
68+
Version: 3 (0x2)
69+
Serial Number: 396534572491127113022787686743653095280228078403 (0x457539a6ac314749fa5ec658f76ed225fd769343)
70+
Signature Algorithm: sha256
71+
Issuer: commonName=CN=ca.example.com, O=Example CA, C=IT, organizationName=Example CA, countryName=IT
72+
Validity
73+
Not Before: May 27 09:13:33 2025 GMT
74+
Not After : May 28 09:13:33 2026 GMT
75+
Subject: commonName=https://intermediate.example.net, organizationName=Example INT, countryName=IT
76+
Subject Public Key Info:
77+
Public Key Algorithm: id-ecPublicKey (EC)
78+
Public-Key: (256 bit)
79+
Curve: secp256r1
80+
X: 25156074883156693989891139993064608529947553342874167037412394938695986639833
81+
Y: 37747901399770759266458300753958501018530290808445029579181649667235295170256
82+
X509v3 extensions:
83+
X509v3 Basic Constraints:
84+
CA:TRUE, pathlen:1
85+
X509v3 Key Usage:
86+
Digital Signature, Key Encipherment, Certificate Sign, CRL Sign
87+
X509v3 CRL Distribution Points:
88+
Full Name:
89+
URI:https://intermediate.example.net/crl/intermediate.example.net.crl
90+
X509v3 Name Constraints:
91+
Excluded:
92+
DNS.1=localhost
93+
DNS.2=localhost.localdomain
94+
DNS.3=127.0.0.1
95+
DNS.4=example.com
96+
DNS.5=example.org
97+
DNS.6=example.net
98+
99+
Signature Algorithm: sha256
100+
30:46:02:21:00:cb:1d:01:ee:1b:bf:a1:4d:36:42:d2
101+
0a:7e:80:37:44:e6:e0:ae:6c:70:58:ea:4c:60:00:af
102+
53:3b:11:f6:66:02:21:00:c6:08:73:d8:45:7e:e8:e9
103+
5e:be:5b:68:9e:12:e9:a2:8e:95:31:01:1d:9e:99:04
104+
17:d3:f3:54:71:1b:9f:ac
105+
106+
-----BEGIN CERTIFICATE-----
107+
MIICjzCCAjSgAwIBAgIURXU5pqwxR0n6XsZY927SJf12k0MwCgYIKoZIzj0EAwIw
108+
UjEuMCwGA1UEAwwlQ049Y2EuZXhhbXBsZS5jb20sIE89RXhhbXBsZSBDQSwgQz1J
109+
VDETMBEGA1UECgwKRXhhbXBsZSBDQTELMAkGA1UEBhMCSVQwHhcNMjUwNTI3MDkx
110+
MzMzWhcNMjYwNTI4MDkxMzMzWjBOMSkwJwYDVQQDDCBodHRwczovL2ludGVybWVk
111+
aWF0ZS5leGFtcGxlLm5ldDEUMBIGA1UECgwLRXhhbXBsZSBJTlQxCzAJBgNVBAYT
112+
AklUMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEN53VdNZrwDIEoleHOjbgNAA9
113+
Ab6PeLajowvmkPNm89lTdI4YecjNJYS35wyhMEt+opXZukysBjRRO84M8I6O0KOB
114+
6zCB6DASBgNVHRMBAf8ECDAGAQH/AgEBMA4GA1UdDwEB/wQEAwIBpjBSBgNVHR8E
115+
SzBJMEegRaBDhkFodHRwczovL2ludGVybWVkaWF0ZS5leGFtcGxlLm5ldC9jcmwv
116+
aW50ZXJtZWRpYXRlLmV4YW1wbGUubmV0LmNybDBuBgNVHR4BAf8EZDBioWAwC4IJ
117+
bG9jYWxob3N0MBeCFWxvY2FsaG9zdC5sb2NhbGRvbWFpbjALggkxMjcuMC4wLjEw
118+
DYILZXhhbXBsZS5jb20wDYILZXhhbXBsZS5vcmcwDYILZXhhbXBsZS5uZXQwCgYI
119+
KoZIzj0EAwIDSQAwRgIhAMsdAe4bv6FNNkLSCn6AN0Tm4K5scFjqTGAAr1M7EfZm
120+
AiEAxghz2EV+6OlevltonhLpoo6VMQEdnpkEF9PzVHEbn6w=
121+
-----END CERTIFICATE-----
122+
123+
Certificate:
124+
Data:
125+
Version: 3 (0x2)
126+
Serial Number: 284423255585370380375410701638165198317432410917 (0x31d1fad9752ce503dbbacd0bf76abc930d651325)
127+
Signature Algorithm: sha256
128+
Issuer: commonName=CN=ca.example.com, O=Example CA, C=IT, organizationName=Example CA, countryName=IT
129+
Validity
130+
Not Before: May 27 09:13:33 2025 GMT
131+
Not After : May 28 09:13:33 2026 GMT
132+
Subject: commonName=CN=ca.example.com, O=Example CA, C=IT, organizationName=Example CA, countryName=IT
133+
Subject Public Key Info:
134+
Public Key Algorithm: id-ecPublicKey (EC)
135+
Public-Key: (256 bit)
136+
Curve: secp256r1
137+
X: 7607860515366991947250115130866123391572079251785604713950047686319787674406
138+
Y: 74493290682810963932331564302963289249956540428755890573822716633130571216251
139+
X509v3 extensions:
140+
X509v3 Basic Constraints:
141+
CA:TRUE, pathlen:2
142+
X509v3 Subject Alternative Name:
143+
DNS:ca.example.com
144+
X509v3 Key Usage:
145+
Digital Signature, Key Encipherment, Certificate Sign, CRL Sign
146+
X509v3 CRL Distribution Points:
147+
Full Name:
148+
URI:https://ca.example.com/crl/ca.example.com.crl
149+
X509v3 Name Constraints:
150+
Excluded:
151+
DNS.1=localhost
152+
DNS.2=localhost.localdomain
153+
DNS.3=127.0.0.1
154+
DNS.4=example.com
155+
DNS.5=example.org
156+
DNS.6=example.net
157+
158+
Signature Algorithm: sha256
159+
30:46:02:21:00:b9:6c:2c:6f:9a:18:b8:04:d6:39:d3
160+
50:dd:e6:a6:ce:9b:f0:d8:64:48:7b:4b:33:2e:fe:d9
161+
3d:13:81:4c:d4:02:21:00:ab:10:9d:f1:0f:64:d8:dc
162+
76:53:d1:e3:32:b1:65:b7:97:83:d7:69:0f:5a:da:9b
163+
1e:a4:a9:a3:88:98:6b:5f
164+
165+
-----BEGIN CERTIFICATE-----
166+
MIICmjCCAj+gAwIBAgIUMdH62XUs5QPbus0L92q8kw1lEyUwCgYIKoZIzj0EAwIw
167+
UjEuMCwGA1UEAwwlQ049Y2EuZXhhbXBsZS5jb20sIE89RXhhbXBsZSBDQSwgQz1J
168+
VDETMBEGA1UECgwKRXhhbXBsZSBDQTELMAkGA1UEBhMCSVQwHhcNMjUwNTI3MDkx
169+
MzMzWhcNMjYwNTI4MDkxMzMzWjBSMS4wLAYDVQQDDCVDTj1jYS5leGFtcGxlLmNv
170+
bSwgTz1FeGFtcGxlIENBLCBDPUlUMRMwEQYDVQQKDApFeGFtcGxlIENBMQswCQYD
171+
VQQGEwJJVDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABBDR5X4r9VUDnU5X2rIf
172+
xDo7DFNodgP2AD4jzqrETwsmpLG1V9s1bu+zyFrnGVvKmoqR0kOeZ1/vyN5vhMcx
173+
NXujgfIwge8wEgYDVR0TAQH/BAgwBgEB/wIBAjAZBgNVHREEEjAQgg5jYS5leGFt
174+
cGxlLmNvbTAOBgNVHQ8BAf8EBAMCAaYwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cHM6
175+
Ly9jYS5leGFtcGxlLmNvbS9jcmwvY2EuZXhhbXBsZS5jb20uY3JsMG4GA1UdHgEB
176+
/wRkMGKhYDALgglsb2NhbGhvc3QwF4IVbG9jYWxob3N0LmxvY2FsZG9tYWluMAuC
177+
CTEyNy4wLjAuMTANggtleGFtcGxlLmNvbTANggtleGFtcGxlLm9yZzANggtleGFt
178+
cGxlLm5ldDAKBggqhkjOPQQDAgNJADBGAiEAuWwsb5oYuATWOdNQ3eamzpvw2GRI
179+
e0szLv7ZPROBTNQCIQCrEJ3xD2TY3HZT0eMysWW3l4PXaQ9a2psepKmjiJhrXw==
180+
-----END CERTIFICATE-----

0 commit comments

Comments
 (0)