--On May 22, 2007 16:01:41 -0700 Richard Kao <[EMAIL PROTECTED]> wrote:

Hope someone can help me understand the validity date and time format of
x509.

For example, when connecting to https://401k.fidelity.com/, my IE shows
it's cert validity is
Valid from: August 30, 2006 5:00:00 PM
Valid to:    August 31, 2007 4:59:59 PM

Ethereal shows the same fields of the x509 cert as:
decoded notBefore:  0   6   0  8   3   1  0   0   0   0   0  0   Z
                    (hex: 30 36 30 38 33 31 30 30 30 30 30 30 5A)
decoded notAfter:    0   7   0  8   3   1   2  3   5   9   5   9  Z
                    (hex: 30 37 30 38 33 31 32 33 35 39 35 39 5A)

It's staightfoward that 0 6 0 8 3 match 2006 08 3*, 0 7 0 8 3 match 2007
08 3*; 0 0 0 0 Z match 00:00, 5 9 5 9 Z match 59:59, but I found it's a
bit confusing to decode the middle digits of notBefore and notAfter.

The format of universalTime (time format for certificate times before 2050)
is YYMMDDHHMMSS followed by the time zone (Z means Zulu time (GMT))
IE translates that into the your local time.

Bye

Goetz

--
DMCA: The greed of the few outweights the freedom of the many

Attachment: pgpan7AcUSGnr.pgp
Description: PGP signature

Reply via email to