1This is a version 2 certificate containing the issuer unique ID field. 2 3 4$ openssl asn1parse -i < [TBS CERTIFICATE] 5 0:d=0 hl=2 l= 64 cons: SEQUENCE 6 2:d=1 hl=2 l= 3 cons: cont [ 0 ] 7 4:d=2 hl=2 l= 1 prim: INTEGER :01 8 7:d=1 hl=2 l= 1 prim: INTEGER :01 9 10:d=1 hl=2 l= 3 cons: SEQUENCE 10 12:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 11 15:d=1 hl=2 l= 3 cons: SEQUENCE 12 17:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 13 20:d=1 hl=2 l= 30 cons: SEQUENCE 14 22:d=2 hl=2 l= 13 prim: UTCTIME :121018031200Z 15 37:d=2 hl=2 l= 13 prim: UTCTIME :131018145959Z 16 52:d=1 hl=2 l= 3 cons: SEQUENCE 17 54:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 18 57:d=1 hl=2 l= 3 cons: SEQUENCE 19 59:d=2 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 20 62:d=1 hl=2 l= 2 prim: cont [ 1 ] 21-----BEGIN TBS CERTIFICATE----- 22MECgAwIBAQIBATADBAEBMAMEAQUwHhcNMTIxMDE4MDMxMjAwWhcNMTMxMDE4MTQ1OTU5WjADBAG 23DMAMEAfOBAgC5 24-----END TBS CERTIFICATE----- 25 26-----BEGIN SERIAL NUMBER----- 27AQ== 28-----END SERIAL NUMBER----- 29 30$ openssl asn1parse -i < [SIGNATURE ALGORITHM] 31 0:d=0 hl=2 l= 3 cons: SEQUENCE 32 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:01 33-----BEGIN SIGNATURE ALGORITHM----- 34MAMEAQE= 35-----END SIGNATURE ALGORITHM----- 36 37$ openssl asn1parse -i < [ISSUER] 38 0:d=0 hl=2 l= 3 cons: SEQUENCE 39 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:05 40-----BEGIN ISSUER----- 41MAMEAQU= 42-----END ISSUER----- 43 44VALIDITY NOTBEFORE: year=2012, month=10, day=18, hours=3, minutes=12, seconds=0 45-----BEGIN VALIDITY NOTBEFORE----- 46eWVhcj0yMDEyLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0zLCBtaW51dGVzPTEyLCBzZWNvbmR 47zPTA= 48-----END VALIDITY NOTBEFORE----- 49 50VALIDITY NOTAFTER: year=2013, month=10, day=18, hours=14, minutes=59, seconds=59 51-----BEGIN VALIDITY NOTAFTER----- 52eWVhcj0yMDEzLCBtb250aD0xMCwgZGF5PTE4LCBob3Vycz0xNCwgbWludXRlcz01OSwgc2Vjb25 53kcz01OQ== 54-----END VALIDITY NOTAFTER----- 55 56$ openssl asn1parse -i < [SUBJECT] 57 0:d=0 hl=2 l= 3 cons: SEQUENCE 58 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:83 59-----BEGIN SUBJECT----- 60MAMEAYM= 61-----END SUBJECT----- 62 63$ openssl asn1parse -i < [SPKI] 64 0:d=0 hl=2 l= 3 cons: SEQUENCE 65 2:d=1 hl=2 l= 1 prim: OCTET STRING [HEX DUMP]:F3 66-----BEGIN SPKI----- 67MAMEAfM= 68-----END SPKI----- 69 70-----BEGIN ISSUER UNIQUE ID----- 71uQ== 72-----END ISSUER UNIQUE ID----- 73