Michael,
Actually it did issue the certificate but the whole subject alternative
name field is empty now
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha1WithRSAEncryption
Issuer: CN=Crash Virginia Tech User CA,O=vt,C=US
Validity
Not Before: Jul 7 14:57:18 2004 GMT
Not After : Jul 7 14:57:18 2005 GMT
Subject:
serialNumber=4,CN=drclay.w2k-pilot.vt.edu,OU=vtmig,O=vt,L=Blacksburg,ST=
Virginia,C=US,DC=vt,DC=edu
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (2048 bit)
Modulus (2048 bit):
00:ca:c9:45:9a:ba:3c:bd:ff:60:96:20:60:bf:7f:
b9:78:ec:82:6d:0e:0d:0b:cf:8a:ea:31:88:c2:3f:
d5:3b:8d:bd:44:09:05:08:ec:f4:9a:03:7f:69:e1:
ad:3a:03:e0:6c:9a:4d:69:b5:56:ac:95:5c:f0:38:
52:09:b7:b4:84:f9:12:22:60:0a:b1:d5:6e:b8:1e:
af:17:93:9b:ba:a4:07:00:53:d3:26:c5:69:75:32:
5e:22:00:d5:b6:e0:77:15:aa:9a:f9:d0:56:1d:40:
69:e7:7f:75:c5:79:a5:fd:5d:f6:52:c8:71:c9:65:
d0:0e:00:a8:ca:20:56:d5:cd:95:2d:d5:16:65:ab:
34:fe:11:68:cc:3d:b4:bd:1d:12:4c:c7:df:82:ac:
d5:b9:f0:0f:1e:66:42:6d:20:f8:29:8e:05:11:22:
c9:38:b6:58:55:3d:00:f8:1a:b6:1e:95:86:d2:0a:
b1:d9:3a:8d:e1:e4:c8:b6:60:f0:4b:63:d9:0e:3a:
05:c3:8c:81:14:ee:de:65:c8:a9:85:ea:26:78:22:
cd:2a:3c:e6:22:a4:ee:d9:89:bf:e0:78:53:39:ee:
77:3f:a4:30:83:06:86:55:d6:f4:05:35:40:9c:66:
89:80:0d:37:dd:31:1b:d8:f8:7b:bd:b8:9c:88:a1:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Certificate Policies:
Policy: 1.2.3.3.4
CPS: http://some.url.org/cps
X509v3 Key Usage:
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Client Authentication, TLS Web Server Authentication
Netscape Comment:
Domain Controller of vt
1.3.6.1.4.1.311.20.2:
. .D.o.m.a.i.n.C.o.n.t.r.o.l.l.e.r
X509v3 Subject Key Identifier:
BA:D5:AB:6B:A7:15:8A:19:4E:5D:23:40:7A:C7:52:05:C9:BF:E6:4E
X509v3 Authority Key Identifier:
keyid:C3:05:42:6C:CE:A6:48:55:AD:CE:44:D9:21:D3:2D:09:EF:F6:8A:4A
DirName:/C=US/O=vt/CN=Crash Virginia Tech User CA
serial:CE:4B:67:47:C0:5A:F4:0B
X509v3 Subject Alternative Name:
othername:<unsupported>
X509v3 Issuer Alternative Name:
<EMPTY>
X509v3 CRL Distribution Points:
URI:https://balamood2.cc.vt.edu/crl/cacrl.crl
Signature Algorithm: sha1WithRSAEncryption
1c:ab:98:a0:82:d8:7a:76:50:1f:3c:5c:6b:60:87:bb:e2:e7:
ed:d5:8b:4e:ea:94:48:5e:5f:9e:08:14:3a:40:ad:f4:d5:5a:
88:df:43:ab:ca:6e:6e:af:6f:82:eb:00:1a:84:25:ef:b0:fb:
74:fe:28:0f:2e:fe:e7:8c:df:6c:05:5d:a1:ea:f0:c6:65:53:
f0:af:e0:d3:6b:17:07:dc:22:f5:a7:04:2a:a8:da:cd:de:96:
e9:68:94:20:31:cc:0a:d1:d8:db:cf:a9:5f:5e:4c:a6:9b:b1:
2a:18:6f:00:09:7c:29:48:48:00:b7:07:cb:be:c3:c8:82:af:
0d:d3:62:85:3b:ee:6b:d5:44:cb:84:ad:b6:fa:de:c0:61:67:
d7:0a:de:88:19:7c:6e:61:70:7a:06:5a:46:cd:57:eb:8d:59:
ba:62:2d:6f:02:d1:b3:6a:ab:04:4f:53:07:b2:cd:d6:d3:4b:
2b:db:6a:af:e5:a9:b8:31:e2:1e:be:b3:27:7a:3b:b4:72:2e:
b9:8b:c3:00:a2:f7:aa:a7:cb:14:58:47:14:a0:a7:2c:b1:7a:
65:0c:73:80:64:0a:19:9b:82:29:7f:0f:c3:9c:43:b8:07:9c:
9c:91:b0:5e:94:df:dc:99:7f:06:bd:84:e5:dd:8a:d0:b9:16:
e7:71:b9:ad:c1:f1:be:75:5e:dd:1a:2b:9f:f6:14:4e:c1:ae:
38:e8:f0:30:64:72:a9:08:65:90:ba:97:8a:55:df:73:1b:cb:
1c:eb:89:54:0c:a2:56:43:ba:af:09:ee:1b:dd:a8:87:44:d9:
0c:02:49:cc:77:82:de:4a:fc:e9:f5:01:49:21:47:c2:d1:f6:
2e:b8:6a:f6:d0:1f:45:cb:3a:36:1c:ef:d0:82:d3:0b:ac:27:
5c:14:74:9b:4a:3f:d3:06:5a:f0:02:49:fe:6f:49:35:94:b4:
cc:85:16:a2:3b:30:53:5a:e2:a6:05:9a:b9:9d:d1:bc:2b:24:
c2:4a:b9:97:26:59:73:83:f4:43:48:f5:59:4a:bd:0a:94:c3:
64:a6:94:68:20:97:eb:d4:1a:1a:3e:e0:60:fd:71:05:51:1d:
23:16:5a:db:9c:35:30:e5:d8:4f:74:f8:47:b7:8c:7f:75:20:
25:db:04:0f:54:12:dd:8d:84:56:4c:0f:b7:0f:fc:ba:41:96:
df:06:67:2c:bf:e5:1e:b1:59:a9:a2:f8:46:aa:f9:6b:9f:bc:
55:0b:1c:c9:da:da:c9:8c:87:7f:3f:e5:f2:c7:49:fd:26:a4:
7a:f7:52:23:97:a9:ea:c6:04:98:e8:17:9a:78:40:6d:c7:ad:
b3:a1:7b:e6:92:28:e4:57
Any clues ??
Best regards,
Bahaa Al-amood
> -----Original Message-----
> From: Al-Amood, Bahaaldin
> Sent: Wednesday, July 07, 2004 10:59 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [OpenCA-Devel] Domain Controler
>
> Hi Michael,
>
> Thanks that worked :) I will work on adding these ":" automatically so
> users don't have to fool with it.
>
> Best regards,
> Bahaa Al-amood
>
> > -----Original Message-----
> > From: Michael Bell [mailto:[EMAIL PROTECTED]
> > Sent: Wednesday, July 07, 2004 10:35 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: [OpenCA-Devel] Domain Controler
> >
> > Hi Bahaa,
> >
> > > ERROR: adding extensions in section default
> > > 17955:error:22071071:X509 V3 routines:string_to_hex:illegal hex
> > > digit:v3_utl.c:442:
> > > 17955:error:0D0B30B2:asn1 encoding routines:ASN1_STR2TYPE:illegal
> > > hex:asn1_gen.c:765:string=a2 5a 1e 9b 93 74 1b 4c 8d 4b 14 c3 2c
a6
> 0d
> > 4d
> >
> > I think the seperation character of OpenSSL is ":".
> >
> > a2:5a:1e:...
> >
> > Only an idea - no solution.
> >
> > Michael
> > --
> > -------------------------------------------------------------------
> > Michael Bell Email: [EMAIL PROTECTED]
> > ZE Computer- und Medienservice Tel.: +49 (0)30-2093 2482
> > (Computing Centre) Fax: +49 (0)30-2093 2704
> > Humboldt-University of Berlin
> > Unter den Linden 6
> > 10099 Berlin Email (private): [EMAIL PROTECTED]
> > Germany http://www.openca.org
> >
> >
> >
> > -------------------------------------------------------
> > This SF.Net email sponsored by Black Hat Briefings & Training.
> > Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
> > digital self defense, top technical experts, no vendor pitches,
> > unmatched networking opportunities. Visit www.blackhat.com
> > _______________________________________________
> > OpenCA-Devel mailing list
> > [EMAIL PROTECTED]
> > https://lists.sourceforge.net/lists/listinfo/openca-devel
>
>
>
>
> -------------------------------------------------------
> This SF.Net email sponsored by Black Hat Briefings & Training.
> Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
> digital self defense, top technical experts, no vendor pitches,
> unmatched networking opportunities. Visit www.blackhat.com
> _______________________________________________
> OpenCA-Devel mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/openca-devel
-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
digital self defense, top technical experts, no vendor pitches,
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel
