我正在使用数字证书签署交易结果,另外,我需要打印一张带有信息和数字签名的单据。
我想知道是否有专门为印刷媒体设计的 X.509 数字签名的更短表示?也许某种哈希或类似的东西......
非常感谢!
我正在使用数字证书签署交易结果,另外,我需要打印一张带有信息和数字签名的单据。
我想知道是否有专门为印刷媒体设计的 X.509 数字签名的更短表示?也许某种哈希或类似的东西......
非常感谢!
“openssl x509”工具使用“-text”选项提供了一个漂亮、简洁、人类可读的 x.509 证书文本表示:
openssl x509 -noout -text -in CA_2048bit.pem
输出如下所示:
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
00:11:22:33:44:55:66:77:88:99
Signature Algorithm: sha1WithRSAEncryption
Issuer: CN=Some CA, OU=Dept, O=MyOrganization, ST=Mazowieckie, C=PL
Validity
Not Before: Jun 17 14:24:59 2009 GMT
Not After : Jun 17 14:24:57 2029 GMT
Subject: CN=Some Party, OU=Dept, O=MyOrganization, ST=Mazowieckie, C=PL
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (2048 bit)
Modulus (2048 bit):
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:
00:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
Signature Algorithm: sha1WithRSAEncryption
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:ff:00:11:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:ff:00:11:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:ff:00:11:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:ff:00:11:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:ff:00:11:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:ff:00:11:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:ff:00:11:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:ff:00:11:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:ff:00:11:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:ff:00:11:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:ff:00:11:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:ff:00:11:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:ff:00:11:
00:11:22:33:44:55:66:77:88:99:aa:bb:cc:dd:ee:ff:00:11:
00:11:22:33
由于签名和模数信息,这当然有点长。
不幸的是,所有这些数据都是验证证书真实性和使用它来分别验证通过它验证的数字签名所必需的。
没有这些证书内容的其余部分不能证明任何事情。