1This is a valid certificate from the perspective of ParseCertificate(). 2 3 4$ openssl asn1parse -i < [CERTIFICATE] 5 0:d=0 hl=2 l= 16 cons: SEQUENCE 6 2:d=1 hl=2 l= 6 cons: SEQUENCE 7 4:d=2 hl=2 l= 0 prim: NULL 8 6:d=2 hl=2 l= 2 cons: SEQUENCE 9 8:d=3 hl=2 l= 0 prim: NULL 10 10:d=1 hl=2 l= 2 cons: SEQUENCE 11 12:d=2 hl=2 l= 0 prim: NULL 12 14:d=1 hl=2 l= 2 prim: BIT STRING 13-----BEGIN CERTIFICATE----- 14MBAwBgUAMAIFADACBQADAgCs 15-----END CERTIFICATE----- 16 17$ openssl asn1parse -i < [TBS CERTIFICATE] 18 0:d=0 hl=2 l= 6 cons: SEQUENCE 19 2:d=1 hl=2 l= 0 prim: NULL 20 4:d=1 hl=2 l= 2 cons: SEQUENCE 21 6:d=2 hl=2 l= 0 prim: NULL 22-----BEGIN TBS CERTIFICATE----- 23MAYFADACBQA= 24-----END TBS CERTIFICATE----- 25 26$ openssl asn1parse -i < [SIGNATURE ALGORITHM] 27 0:d=0 hl=2 l= 2 cons: SEQUENCE 28 2:d=1 hl=2 l= 0 prim: NULL 29-----BEGIN SIGNATURE ALGORITHM----- 30MAIFAA== 31-----END SIGNATURE ALGORITHM----- 32 33-----BEGIN SIGNATURE----- 34rA== 35-----END SIGNATURE----- 36