Have Geek Brain

X509 Certificate Information

Certificate:
Data:
    Version: 3 (0x2)
    Serial Number: 95 (0x5f)
    Signature Algorithm: sha1WithRSAEncryption
    Issuer: C=, O=, CN=
    Validity
        Not Before: Apr 22 16:42:11 2008 GMT
        Not After : Apr 22 16:42:11 2009 GMT
    Subject: C=, O=, CN=, L=, ST=
    Subject Public Key Info:
        Public Key Algorithm: rsaEncryption
        RSA Public Key: (1024 bit)
            Modulus (1024 bit):
                ...
                ...
                ...
            Exponent: 65537 (0x10001)
    X509v3 extensions:
        X509v3 Key Usage: critical
            Digital Signature, Key Encipherment
        X509v3 Extended Key Usage: critical
            Code Signing
        X509v3 Authority Key Identifier:
            keyid: ...

Signature Algorithm: sha1WithRSAEncryption
    a9:55:56:9b:9e:60:7a:57:fd:7:6b:1e:c0:79:1c:50:62:8f:
    ...
    ...
-----BEGIN CERTIFICATE-----
...
...
...
-----END CERTIFICATE-----

In this certificate, What is a public key? is a module? what does the Signature Algorithm, a9: 55: 56: ... represent (is this a message digest)? And what is between ----- BEGIN CERTIFICATE ----- and ----- END OF CERTIFICATE ----- what is the whole certificate?

How am I a newbie getting a little confused between message digest and public key?

Thanks in Advance-opensid

+2


a source to share


2 answers


An RSA public key consists of a module and exponent pair, which is shown in the stanza "RSA Public Key". So this is the public public key.

The x509 certificate is also signed by the certification authority, so the data in the "Signing algorithm" stanza is the signature, RSA-encrypted SHA1 digest of the previous section "Data:".



The data encoded in base64 between "BEGIN CERTIFICATE" and "END CERTIFICATE" is x509 certificate in machine readable form (all text data above for human consumption). When processing a PEM format file such as this, only the data between the "BEGIN" and "END" lines is actually read.

+4


a source


The public key consists of a module and a public exhibitor.

The six lines after the signature algorithm are the signature.



X509 is encoded in binary encoding (DER) ASN.1. It is usually converted to PEM text format, which is text between the start and end markers (inclusive).

+1


a source






More articles:


All Articles