Re: sample X.509 certificates?

"yawnmoth" <terra1024@xxxxxxxxx> writes:

I'd like to see how the X.509 certificate of a certificate authority
looks like. They're built into browsers, but I'd like to see the DER-
encoded version.

The ca-certificates package from Debian contains many in PEM format.
<http://packages.debian.org/unstable/misc/ca-certificates>. You can
convert using OpenSSL: openssl x509 -in <pem-file> -outform DER -out <der-file>.

PKITS provides a source of test certs and CRLs:
<http://csrc.nist.gov/pki/testing/x509paths.html>.

Also, according to what I've read about SSL/TLS, the client and the
server each send their own X.509 certificate.

That's relatively rare.
.