Re: sample X.509 certificates?



"yawnmoth" <terra1024@xxxxxxxxx> writes:
I'd like to see how the X.509 certificate of a certificate authority
looks like. They're built into browsers, but I'd like to see the DER-
encoded version.

Look for the CAcertbundle from the Mozilla project. Won't look much
different than you'd see for any other cert.

Also, according to what I've read about SSL/TLS, the client and the
server each send their own X.509 certificate. How might I go about
getting the latter? The client's (for example, FireFox's) X.509
certificate? I tried using WireShark to capture the packets as they
were being sent out but didn't see the certificates there...

Client X.509 certificates are very rare.

You should see the server X.509 certificate going over the wire during
conversation though. ie. use 'openssl s_client' command line command
and it'll dump it out for you as it talks.

.



Relevant Pages

  • RE: RPc server is unavailable since SP1
    ... I ran the command and it created the group and also placed the Domain Users ... DC to Member Server and Member Server to DC and also to clients. ... >>> when the member server update certificate you get the error message RPC ... >>> interface security settings before the installation of SP1 will be lost. ...
    (microsoft.public.windows.server.sbs)
  • Re: Entropy sources under WinXP
    ... you can depict the certificate much more ... If the so-called forums can say pretty, the retail ... holly may command more columns. ...
    (sci.crypt)
  • Re: sbs 2k3 - certificate authority web server template - not being able to issue a certific
    ... i had to export the root certificate from fedora and import to the trusted ... Net start certsvc ... msPKI-Certificate-Application-Policy ... At the command prompt, type the following command, and then press ...
    (microsoft.public.windows.server.sbs)
  • RE: sbs 2k3 - certificate authority web server template - not being able to issue a certific
    ... error when you request certificate. ... Net start certsvc ... msPKI-Certificate-Application-Policy ... At the command prompt, type the following command, and then press ...
    (microsoft.public.windows.server.sbs)
  • Re: Certificate Installation Question
    ... Command looks like: ... You can ask about RADIUS, IAS, 802.1x, Active directory configuration and Certificate services, related to IAS and RADIUS ... It needs to be in the local computer store. ... > I have the cert as a file. ...
    (microsoft.public.internet.radius)