1This is a v2 certificate which contains extensions. This is invalid since v2 2does not have extensions defined. 3 4 5$ openssl asn1parse -i < [TBS CERTIFICATE] 6 0:d=0 hl=2 l= 67 cons: SEQUENCE 7 2:d=1 hl=2 l= 3 cons: cont [ 0 ] 8 4:d=2 hl=2 l= 1 prim: INTEGER :01 9 7:d=1 hl=2 l= 1 prim: INTEGER :01 10 10:d=1 hl=2 l= 3 cons: SEQUENCE 11 12:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 12 15:d=1 hl=2 l= 3 cons: SEQUENCE 13 17:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 14 20:d=1 hl=2 l= 30 cons: SEQUENCE 15 22:d=2 hl=2 l= 13 prim: UTCTIME :121018031200Z 16 37:d=2 hl=2 l= 13 prim: UTCTIME :131018145959Z 17 52:d=1 hl=2 l= 3 cons: SEQUENCE 18 54:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 19 57:d=1 hl=2 l= 3 cons: SEQUENCE 20 59:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 21 62:d=1 hl=2 l= 5 cons: cont [ 3 ] 22 64:d=2 hl=2 l= 3 cons: SEQUENCE 23 66:d=3 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:DD 24-----BEGIN TBS CERTIFICATE----- 25MEOgAwIBAQIBATADBAEBMAMEAQUwHhcNMTIxMDE4MDMxMjAwWhcNMTMxMDE4MTQ1OTU5WjADBAG 26DMAMEAfOjBTADBAHd 27-----END TBS CERTIFICATE----- 28 29ERROR: Unexpected extensions (must be V3 certificate) 30 31-----BEGIN ERRORS----- 32RVJST1I6IFVuZXhwZWN0ZWQgZXh0ZW5zaW9ucyAobXVzdCBiZSBWMyBjZXJ0aWZpY2F0ZSkK 33-----END ERRORS-----