Frank Balluffi wrote:
>
> Steve,
>
> Attached are:
>
> 1. cert.pem: sample certificate (PEM format)
> 2. cert.der: sample certificate (DER encoded)
> 3. cert.html: dump of cert.der (in HTML)
> 4. aki.der: AuthorityKeyIdentifier from sample certificate (DER encoded)
> 5. aki.html: dump of aki.der (in HTML)
>
> Note that 4 and 5 only contain the extension's AuthorityKeyIdentifier value,
> not the entire extension. Thanks.
>
Err, I'm a bit confused here. When I display the certificate with:
openssl x509 -in cert.pem -text
it displays akid just fine:
X509v3 Authority Key Identifier:
keyid:8F:5D:90:25:A3:2D:B6:4A:73:68:9D:F2:DC:47:4F:60:7C:1B:56:AE
DirName:/C=US/ST=CA/L=Mt. View/O=Valicert/OU=SQA/CN=Testlab10
serial:74:D4:F5:A5:EF:FF:38:47:EE:2D:61:46:9E:08:96:53
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
