1This is a version 2 certificate with none of the optional fields. 2 3 4$ openssl asn1parse -i < [TBS CERTIFICATE] 5 0:d=0 hl=2 l= 60 cons: SEQUENCE 6 2:d=1 hl=2 l= 3 cons: cont [ 0 ] 7 4:d=2 hl=2 l= 1 prim: INTEGER :01 8 7:d=1 hl=2 l= 1 prim: INTEGER :01 9 10:d=1 hl=2 l= 3 cons: SEQUENCE 10 12:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 11 15:d=1 hl=2 l= 3 cons: SEQUENCE 12 17:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 13 20:d=1 hl=2 l= 30 cons: SEQUENCE 14 22:d=2 hl=2 l= 13 prim: UTCTIME :121018031200Z 15 37:d=2 hl=2 l= 13 prim: UTCTIME :131018145959Z 16 52:d=1 hl=2 l= 3 cons: SEQUENCE 17 54:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 18 57:d=1 hl=2 l= 3 cons: SEQUENCE 19 59:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 20-----BEGIN TBS CERTIFICATE----- 21MDygAwIBAQIBATADBAEBMAMEAQUwHhcNMTIxMDE4MDMxMjAwWhcNMTMxMDE4MTQ1OTU5WjADBAG 22DMAMEAfM= 23-----END TBS CERTIFICATE----- 24 25-----BEGIN SERIAL NUMBER----- 26AQ== 27-----END SERIAL NUMBER----- 28 29$ openssl asn1parse -i < [SIGNATURE ALGORITHM] 30 0:d=0 hl=2 l= 3 cons: SEQUENCE 31 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 32-----BEGIN SIGNATURE ALGORITHM----- 33MAMEAQE= 34-----END SIGNATURE ALGORITHM----- 35 36$ openssl asn1parse -i < [ISSUER] 37 0:d=0 hl=2 l= 3 cons: SEQUENCE 38 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 39-----BEGIN ISSUER----- 40MAMEAQU= 41-----END ISSUER----- 42 43VALIDITY NOTBEFORE: year=2012, month=10, day=18, hours=3, minutes=12, seconds=0 44-----BEGIN VALIDITY NOTBEFORE----- 45eWVhcj0yMDEyLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0zLCBtaW51dGVzPTEyLCBzZWNvbmR 46zPTA= 47-----END VALIDITY NOTBEFORE----- 48 49VALIDITY NOTAFTER: year=2013, month=10, day=18, hours=14, minutes=59, seconds=59 50-----BEGIN VALIDITY NOTAFTER----- 51eWVhcj0yMDEzLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0xNCwgbWludXRlcz01OSwgc2Vjb25 52kcz01OQ== 53-----END VALIDITY NOTAFTER----- 54 55$ openssl asn1parse -i < [SUBJECT] 56 0:d=0 hl=2 l= 3 cons: SEQUENCE 57 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 58-----BEGIN SUBJECT----- 59MAMEAYM= 60-----END SUBJECT----- 61 62$ openssl asn1parse -i < [SPKI] 63 0:d=0 hl=2 l= 3 cons: SEQUENCE 64 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 65-----BEGIN SPKI----- 66MAMEAfM= 67-----END SPKI----- 68