1This is a very basic TBSCertificate. It is valid from the perspective of
2ParseTbsCertificate(), however its sub-fields are mainly bogus. This
3TBSCertificate contains no optional fields (no issuerUniqueID, subjectUniqueID,
4extensions)
5
6
7$ openssl asn1parse -i < [TBS CERTIFICATE]
8    0:d=0  hl=2 l=  60 cons: SEQUENCE
9    2:d=1  hl=2 l=   3 cons:  cont [ 0 ]
10    4:d=2  hl=2 l=   1 prim:   INTEGER           :02
11    7:d=1  hl=2 l=   1 prim:  INTEGER           :01
12   10:d=1  hl=2 l=   3 cons:  SEQUENCE
13   12:d=2  hl=2 l=   1 prim:   OCTET STRING      [HEX DUMP]:01
14   15:d=1  hl=2 l=   3 cons:  SEQUENCE
15   17:d=2  hl=2 l=   1 prim:   OCTET STRING      [HEX DUMP]:05
16   20:d=1  hl=2 l=  30 cons:  SEQUENCE
17   22:d=2  hl=2 l=  13 prim:   UTCTIME           :121018031200Z
18   37:d=2  hl=2 l=  13 prim:   UTCTIME           :131018145959Z
19   52:d=1  hl=2 l=   3 cons:  SEQUENCE
20   54:d=2  hl=2 l=   1 prim:   OCTET STRING      [HEX DUMP]:83
21   57:d=1  hl=2 l=   3 cons:  SEQUENCE
22   59:d=2  hl=2 l=   1 prim:   OCTET STRING      [HEX DUMP]:F3
23-----BEGIN TBS CERTIFICATE-----
24MDygAwIBAgIBATADBAEBMAMEAQUwHhcNMTIxMDE4MDMxMjAwWhcNMTMxMDE4MTQ1OTU5WjADBAG
25DMAMEAfM=
26-----END TBS CERTIFICATE-----
27
28-----BEGIN SERIAL NUMBER-----
29AQ==
30-----END SERIAL NUMBER-----
31
32$ openssl asn1parse -i < [SIGNATURE ALGORITHM]
33    0:d=0  hl=2 l=   3 cons: SEQUENCE
34    2:d=1  hl=2 l=   1 prim:  OCTET STRING      [HEX DUMP]:01
35-----BEGIN SIGNATURE ALGORITHM-----
36MAMEAQE=
37-----END SIGNATURE ALGORITHM-----
38
39$ openssl asn1parse -i < [ISSUER]
40    0:d=0  hl=2 l=   3 cons: SEQUENCE
41    2:d=1  hl=2 l=   1 prim:  OCTET STRING      [HEX DUMP]:05
42-----BEGIN ISSUER-----
43MAMEAQU=
44-----END ISSUER-----
45
46VALIDITY NOTBEFORE: year=2012, month=10, day=18, hours=3, minutes=12, seconds=0
47-----BEGIN VALIDITY NOTBEFORE-----
48eWVhcj0yMDEyLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0zLCBtaW51dGVzPTEyLCBzZWNvbmR
49zPTA=
50-----END VALIDITY NOTBEFORE-----
51
52VALIDITY NOTAFTER: year=2013, month=10, day=18, hours=14, minutes=59, seconds=59
53-----BEGIN VALIDITY NOTAFTER-----
54eWVhcj0yMDEzLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0xNCwgbWludXRlcz01OSwgc2Vjb25
55kcz01OQ==
56-----END VALIDITY NOTAFTER-----
57
58$ openssl asn1parse -i < [SUBJECT]
59    0:d=0  hl=2 l=   3 cons: SEQUENCE
60    2:d=1  hl=2 l=   1 prim:  OCTET STRING      [HEX DUMP]:83
61-----BEGIN SUBJECT-----
62MAMEAYM=
63-----END SUBJECT-----
64
65$ openssl asn1parse -i < [SPKI]
66    0:d=0  hl=2 l=   3 cons: SEQUENCE
67    2:d=1  hl=2 l=   1 prim:  OCTET STRING      [HEX DUMP]:F3
68-----BEGIN SPKI-----
69MAMEAfM=
70-----END SPKI-----
71