1This is a very basic TBSCertificate. It is valid from the perspective of
2ParseTbsCertificate(), however its sub-fields are mainly bogus. This
3TBSCertificate contains extensions.
4
5
6$ openssl asn1parse -i < [TBS CERTIFICATE]
7    0:d=0  hl=2 l=  67 cons: SEQUENCE
8    2:d=1  hl=2 l=   3 cons:  cont [ 0 ]
9    4:d=2  hl=2 l=   1 prim:   INTEGER           :02
10    7:d=1  hl=2 l=   1 prim:  INTEGER           :01
11   10:d=1  hl=2 l=   3 cons:  SEQUENCE
12   12:d=2  hl=2 l=   1 prim:   OCTET STRING      [HEX DUMP]:01
13   15:d=1  hl=2 l=   3 cons:  SEQUENCE
14   17:d=2  hl=2 l=   1 prim:   OCTET STRING      [HEX DUMP]:05
15   20:d=1  hl=2 l=  30 cons:  SEQUENCE
16   22:d=2  hl=2 l=  13 prim:   UTCTIME           :121018031200Z
17   37:d=2  hl=2 l=  13 prim:   UTCTIME           :131018145959Z
18   52:d=1  hl=2 l=   3 cons:  SEQUENCE
19   54:d=2  hl=2 l=   1 prim:   OCTET STRING      [HEX DUMP]:83
20   57:d=1  hl=2 l=   3 cons:  SEQUENCE
21   59:d=2  hl=2 l=   1 prim:   OCTET STRING      [HEX DUMP]:F3
22   62:d=1  hl=2 l=   5 cons:  cont [ 3 ]
23   64:d=2  hl=2 l=   3 cons:   SEQUENCE
24   66:d=3  hl=2 l=   1 prim:    OCTET STRING      [HEX DUMP]:DD
25-----BEGIN TBS CERTIFICATE-----
26MEOgAwIBAgIBATADBAEBMAMEAQUwHhcNMTIxMDE4MDMxMjAwWhcNMTMxMDE4MTQ1OTU5WjADBAG
27DMAMEAfOjBTADBAHd
28-----END TBS CERTIFICATE-----
29
30-----BEGIN SERIAL NUMBER-----
31AQ==
32-----END SERIAL NUMBER-----
33
34$ openssl asn1parse -i < [SIGNATURE ALGORITHM]
35    0:d=0  hl=2 l=   3 cons: SEQUENCE
36    2:d=1  hl=2 l=   1 prim:  OCTET STRING      [HEX DUMP]:01
37-----BEGIN SIGNATURE ALGORITHM-----
38MAMEAQE=
39-----END SIGNATURE ALGORITHM-----
40
41$ openssl asn1parse -i < [ISSUER]
42    0:d=0  hl=2 l=   3 cons: SEQUENCE
43    2:d=1  hl=2 l=   1 prim:  OCTET STRING      [HEX DUMP]:05
44-----BEGIN ISSUER-----
45MAMEAQU=
46-----END ISSUER-----
47
48VALIDITY NOTBEFORE: year=2012, month=10, day=18, hours=3, minutes=12, seconds=0
49-----BEGIN VALIDITY NOTBEFORE-----
50eWVhcj0yMDEyLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0zLCBtaW51dGVzPTEyLCBzZWNvbmR
51zPTA=
52-----END VALIDITY NOTBEFORE-----
53
54VALIDITY NOTAFTER: year=2013, month=10, day=18, hours=14, minutes=59, seconds=59
55-----BEGIN VALIDITY NOTAFTER-----
56eWVhcj0yMDEzLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0xNCwgbWludXRlcz01OSwgc2Vjb25
57kcz01OQ==
58-----END VALIDITY NOTAFTER-----
59
60$ openssl asn1parse -i < [SUBJECT]
61    0:d=0  hl=2 l=   3 cons: SEQUENCE
62    2:d=1  hl=2 l=   1 prim:  OCTET STRING      [HEX DUMP]:83
63-----BEGIN SUBJECT-----
64MAMEAYM=
65-----END SUBJECT-----
66
67$ openssl asn1parse -i < [SPKI]
68    0:d=0  hl=2 l=   3 cons: SEQUENCE
69    2:d=1  hl=2 l=   1 prim:  OCTET STRING      [HEX DUMP]:F3
70-----BEGIN SPKI-----
71MAMEAfM=
72-----END SPKI-----
73
74$ openssl asn1parse -i < [EXTENSIONS]
75    0:d=0  hl=2 l=   3 cons: SEQUENCE
76    2:d=1  hl=2 l=   1 prim:  OCTET STRING      [HEX DUMP]:DD
77-----BEGIN EXTENSIONS-----
78MAMEAd0=
79-----END EXTENSIONS-----
80