]> Test Vectors for CBOR-Encoded X.509 (C509) Certificates NIO Inc.
lijun.liao@nio.io
Ericsson AB
goran.selander@ericsson.com
Ericsson AB
john.mattsson@ericsson.com
Security COSE Working Group Internet-Draft This document contains examples of CBOR-encoded X.509 (C509) certificates, certification requests, and certification request templates.
Introduction This document contains examples of CBOR-encoded X.509 (C509) certificates, certification requests, and certification request templates encoded in CBOR according to the C509 specification . It complements the C509 specification by providing an extensive set of readable examples that illustrate the encodings of certificate and certification request fields, and that can be used to test interoperability between C509 implementations. The examples are shown in multiple encodings and formats: X.509 certificates and certification requests in PEM format, and C509 certificates and certification requests in plain hexadecimal and annotated forms. The examples include two types of C509 certificates, distinguished by the value of the c509CertificateType field (see ):
  • c509CertificateType = 03 (called type 3 in this document) is a reversible CBOR encoding of an X.509 certificate, in which the issuerSignatureValue field of the C509 certificate contains the signatureValue field of the X.509 certificate, that is, the digital signature computed over the ASN.1 DER encoding.
  • c509CertificateType = 02 (called type 2 in this document) differs from type 3 only in this value, in the key identifiers, and in that the issuerSignatureValue field of the C509 certificate contains the signature over the TBSCertificate of the C509 certificate, that is, the digital signature computed over the CBOR encoding. The key identifiers in type 2 certificates are the leftmost 160 bits of the SHA-256 hash of the CBOR encoding of subjectPublicKeyAlgorithm and subjectPublicKey.
The examples also include two analogous types of C509 certification requests, also called type 2 and type 3 in this document, distinguished by the value of the c509CertificationRequestType field. Private keys are also provided to enable the creation of signatures and the verification of ECDH proof of possession. The keys printed in these examples are not secret and MUST NOT be used for any purpose other than testing. The examples are structured as follows:
  • compares the sizes of the X.509 and C509 encodings of the examples.
  • contains a CA certificate used in later sections.
  • contains certificates with different subject public key types, including RSA, Weierstrass EC, Edwards EC, and Montgomery EC keys.
  • contains certificates with different signature and proof-of-possession algorithms and points to the sections where those algorithms are encoded.
  • contains certificates with different RDN attributes and points to the sections where those attributes are encoded.
  • contains certificates with different extensions and points to the sections where those extensions are encoded.
  • contains a certificate with 8-byte integer values for identifiers such as RDN attribute types and extension IDs.
  • provides an example of a certificate with RDN attributes or extensions for which no dedicated CBOR encoding has been defined and for which generic constructs such as CBOR OID are used.
  • provides examples of certification requests with different signature or proof-of-possession algorithms.
  • provides examples of certification requests with different CR attributes.
  • provides an example of a certification request with an 8-byte integer CR attribute type.
  • provides examples of certification request templates.
Terminology The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 when, and only when, they appear in all capitals, as shown here. Readers are expected to be familiar with C509 certificates .
Target version of draft-ietf-cose-cbor-encoded-cert
  • Note to RFC Editor: Please remove this section prior to publication of the final version of this document.
The test vectors in this document align with draft-ietf-cose-cbor-encoded-cert-21.
Location of Test Vectors
  • Note to RFC Editor: Please remove this section prior to publication of the final version of this document.
The test vectors in this document can also be found at https://github.com/lijun-nio/id-c509-cert-test-vectors.
Overview shows the size in bytes and the size reduction of C509 certificates compared to X.509 certificates. Size comparison of certificates in examples
Section Description Size (X.509) Size (C509) Size Reduction
CA Certificate 249 101 59%
RSA Public Key With Public Exponent 65537 464 284 39%
RSA Public Key With Public Exponent 4294967297 467 298 36%
Weierstrass EC Public Key On Curve secp256r1 383 190 50%
Compressed Weierstrass EC Public Key On Curve secp256r1 383 158 59%
Weierstrass EC Public Key On Curve secp384r1 539 309 43%
Weierstrass EC Public Key On Curve secp521r1 811 531 35%
Weierstrass EC Public Key On Curve sm2p256v1 644 326 49%
Weierstrass EC Public Key On Curve brainpoolP256r1 527 234 56%
Weierstrass EC Public Key On Curve brainpoolP384r1 558 291 48%
Weierstrass EC Public Key On Curve brainpoolP512r1 779 421 46%
Weierstrass EC Public Key On Curve frp256v1 584 303 48%
Montgomery EC Public Key On Curve X25519 798 487 39%
Montgomery EC Public Key On Curve X448 732 480 34%
Ed25519 Public Key 784 384 51%
Ed448 Public Key 503 261 48%
Signature Algorithm RSASSA-PKCS1-v1_5 With SHA-1 463 303 35%
Signature Algorithm RSASSA-PKCS1-v1_5 With SHA-512 467 306 34%
Signature Algorithm RSASSA-PSS With SHA-256 575 308 46%
Signature Algorithm RSASSA-PSS With SHA-384 575 308 46%
Signature Algorithm RSASSA-PSS With SHA-512 703 436 38%
Signature Algorithm RSASSA-PSS With SHAKE128 469 310 34%
Signature Algorithm RSASSA-PSS With SHAKE256 597 438 27%
X.509 Certificate With Unconvertible RDN Attributes And Extensions 387 257 34%
The certificates differ in content, e.g., in the number of RDN attributes and extensions, so the size reductions are not comparable across rows. The sections and are not listed because they only refer to certificates in other sections. The certificate in is not listed because it has no X.509 counterpart. shows the size in bytes and the size reduction of C509 certification requests compared to X.509 certification requests. Size comparison of certification requests in examples
Section Description Size (X.509) Size (C509) Size Reduction
Signature Algorithm ECDSA With SHA-256 253 164 35%
Signature Algorithm ECDSA With SHA-384 300 228 24%
Signature Algorithm PoP With SHA-256 And HMAC-SHA256 206 132 36%
Signature Algorithm PoP With SHA-384 And HMAC-SHA384 261 190 27%
Signature Algorithm PoP With SHA-512 And HMAC-SHA512 278 219 21%
Signature Algorithm Unsigned PoP With X25519 Key 135 64 53%
Signature Algorithm Unsigned PoP With X25519 Key And Cert 433 230 47%
As for certificates, the size reductions are not comparable across rows. is not listed because it only refers to certification requests in other sections. The certification request in is not listed because it has no X.509 counterpart.
CA Certificate
  • The CA uses an Ed25519 key pair because the signatures it produces on the certificates it issues are compact and deterministic. The CA certificate itself is unsigned.
  • Signature algorithm: Unsigned
  • Key: Ed25519
Private Key
X.509 Certificate PEM content (DER encoding: 249 bytes): Textual Representation: ]]>
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
  • Compared to the C509 type 2 certificate, the only differences are the certificate type and the subject key identifier. The signature value is empty in both because the CA certificate is unsigned.
Plain hex (101 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type and the subject key identifier.
C509 Type 2 Certificate Plain hex (101 bytes): Annotated hex: 6: 1A 67748580 # [4]. notBefore=1735689600: # 2025-01-01T00:00:00Z 11: 1A 6B36EC7F # [5]. notAfter=1798761599: # 2026-12-31T23:59:59Z 16: 67 # [6]. subject=char[7] 17: 74657374206361 # "test ca" 24: 0C # [7]. subjectPublicKeyAlg=Ed25519 (12) 25: 58 20 # [8]. subject public key=EC point=byte[32] 27: 5A9414AC56D1B6AF0C966FC53B9476B5C95D0EEAAEF764D9EFE86DB732 56: 0C36E1 59: 88 # [9]. extensions=array[8] #---extension[0]--- 60: 01 # [0]. type=SubjectKeyIdentifier (1) 61: 54 # [1]. value=byte[20] 62: 0369D71F96FE1258A746AC2B208E756E6D1D3ED9 #---extension[1]--- 82: 21 # [2]. type=KeyUsage, critical (-2) 83: 18 60 # [3]. value=96: [keyCertSign, cRLSign] #---extension[2]--- 85: 03 # [4]. type=SubjectAlternativeName (3) 86: 6B # [5]. value: DNS, value=char[11] 87: 6578616D706C652E636F6D # "example.com" #---extension[3]--- 98: 23 # [6]. type=BasicConstraints, critical (-4) 99: 20 # [7]. value=-1: CA: true, # pathLenConstraint: unlimited 100: 40 # [10]. signature value=byte[0] ]]>
Certificates With Different Subject Public Keys
RSA Public Key With Public Exponent 65537
  • Self-signed certificate
  • RSA public key with public exponent 65537 (= 2^16 + 1) and a 1024-bit modulus.
  • Signature algorithm: RSASSA-PKCS1-v1_5 with SHA-256
  • NotAfter: null
  • Subject: a commonName containing an EUI-48 value
  • Extensions: a single non-critical keyUsage extension
Private Key
X.509 Certificate PEM content (DER encoding: 464 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
  • Compared to the C509 type 2 certificate, the only differences are the certificate type, the signature value, and the key identifiers.
Plain hex (284 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (284 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: F6 # [5]. notAfter= 13: D8 30 # [6]. subject=tag(48) 15: 46 # byte[6] 16: 1234567890AB 22: 00 # [7]. subjectPublicKeyAlg=RSA (0) 23: 58 80 # [8]. subject public key=modulus=byte[128] 25: B8092F6F04726A921CFAB2D313AE9D2F01C7CE465FAB7DA62C7A5C73FA 54: CE5FFBA2F1DD80A29ADC43399CFCA22279B89A264810E5B926BB5E0D3F 83: 727A763E16013F89F8FEAC59D0FBDD5E8B0C52827E5490F13B84C3634E 112: 89C6D1731AE5F1A60F88ED118D080E1AB2CAA532D06C2F7D2A0874DEE4 141: E6B6E57283F6478DAF4253DB 153: 01 # [9]. extensions=1, KeyUsage: # [digitalSignature] 154: 58 80 # [10]. signature value=byte[128] 156: 371A7322CDD9DECB1F3B4851A18A47B461A479C29DCE7397290C79DB95 185: 643A5C7FE2B1F02DB6AF5F0BCA9602D837F7EB3D4AA28738CBCAD38504 214: 3304E648022A1E9FE0FD19687839AC3EC7C7B6F6E5F85B4416BA085D5C 243: 9E367A0B892829F2F3E4A31D3FDA0E58EA701A72CB3F1B4A06E3DF44F4 272: 492FCFBD5C5F71F03340D7CA ]]>
RSA Public Key With Public Exponent 4294967297
  • Self-signed certificate
  • RSA public key with public exponent 4294967297 (= 2^32 + 1) and a 1024-bit modulus
  • Signature algorithm: RSASSA-PKCS1-v1_5 with SHA-384
  • Subject: a commonName containing an EUI-64 value
  • Extensions: a single critical keyUsage extension
Private Key
X.509 Certificate PEM content (DER encoding: 467 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (298 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (298 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: D8 30 # [6]. subject=tag(48) 20: 48 # byte[8] 21: 1234567890ABCDEF 29: 00 # [7]. subjectPublicKeyAlg=RSA (0) 30: 82 # [8]. subject public key=array[2] 31: 58 80 # [0]. modulus=byte[128] 33: B8092F6F04726A921CFAB2D313AE9D2F01C7CE465FAB7DA62C7A5C73 61: FACE5FFBA2F1DD80A29ADC43399CFCA22279B89A264810E5B926BB5E 89: 0D3F727A763E16013F89F8FEAC59D0FBDD5E8B0C52827E5490F13B84 117: C3634E89C6D1731AE5F1A60F88ED118D080E1AB2CAA532D06C2F7D2A 145: 0874DEE4E6B6E57283F6478DAF4253DB 161: 45 # [1]. exponent=byte[5] 162: 0100000001 167: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 168: 58 80 # [10]. signature value=byte[128] 170: 507EE326549994969B3FAD4309A2704F424E435A24C505603F51104F1E 199: 8DDB153D784A9E34E88BC74F67143970B0FCBD2119AC89E87ABF9C2818 228: FFBF5C6993F87F7A5B640BB7E0FDBCE5F2136377F70C279D76866D725E 257: 5868F4FE56F031E80ACBEDE58A6E1AD1CD65A0ADB303C555F408651D5E 286: 7F752805EA4B79EF36105344 ]]>
Weierstrass EC Public Key On Curve secp256r1
  • Self-signed certificate
  • EC public key on the curve secp256r1
  • Signature algorithm: ECDSA with SHA-256
  • Subject: a commonName containing an even number of lowercase hexadecimal characters
  • Extensions
    • Basic Constraints: CA, without pathLenConstraint
    • Extended Key Usage: only an integer-identified usage
    • Subject Key Identifier
Private Key
X.509 Certificate PEM content (DER encoding: 383 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (190 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (190 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 48 # [6]. subject=byte[8] 18: 1234567890ABCDEF 26: 01 # [7]. subjectPublicKeyAlg=EC public key on # curve secp256r1 (1) 27: 58 41 # [8]. subject public key=EC point=byte[65] 29: 04F413596A87125995B4E0D8B7BEFBC4D6EDB11F61AF08AB32408D4FF9 58: F9078DDBAB3635AFD496D5656A22EFDC3D59C4482A99836BB358FBF4CA 87: 78D3930436C857 94: 88 # [9]. extensions=array[8] #---extension[0]--- 95: 01 # [0]. type=SubjectKeyIdentifier (1) 96: 54 # [1]. value=byte[20] 97: 1F3BC19DE194830066C6EAE7CB9D211339EDD942 #---extension[1]--- 117: 02 # [2]. type=KeyUsage (2) 118: 18 60 # [3]. value=96: [keyCertSign, cRLSign] #---extension[2]--- 120: 23 # [4]. type=BasicConstraints, critical (-4) 121: 20 # [5]. value=-1: CA: true, # pathLenConstraint: unlimited #---extension[3]--- 122: 08 # [6]. type=ExtendedKeyUsage (8) 123: 01 # [7]. value=serverAuth (1) 124: 58 40 # [10]. signature value=byte[64] 126: 8A25E8AABBA4B19B8E0D1596A476C2C42F5068F5F3457606806E2F284A 155: 22E6E71EF91E63F35636A4D497E1FB4D3C393ADCDB09D92E02E0194D70 184: 3ECD98EB2D79 ]]>
Compressed Weierstrass EC Public Key On Curve secp256r1
  • Self-signed certificate
  • EC public key on the curve secp256r1, compressed only in the C509 certificates
  • Signature algorithm: ECDSA with SHA-256
  • Subject: a commonName containing an even number of lowercase hexadecimal characters
  • Extensions
    • Basic Constraints: CA, without pathLenConstraint
    • Extended Key Usage: only an integer-identified usage
    • Subject Key Identifier
Private Key See .
X.509 Certificate See .
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (158 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (158 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 48 # [6]. subject=byte[8] 18: 1234567890ABCDEF 26: 01 # [7]. subjectPublicKeyAlg=EC public key on # curve secp256r1 (1) 27: 58 21 # [8]. subject public key=EC point=byte[33] 29: FDF413596A87125995B4E0D8B7BEFBC4D6EDB11F61AF08AB32408D4FF9 58: F9078DDB 62: 88 # [9]. extensions=array[8] #---extension[0]--- 63: 01 # [0]. type=SubjectKeyIdentifier (1) 64: 54 # [1]. value=byte[20] 65: 26CD540B3E3D99A64AAB0B62ECA277B4359EAD04 #---extension[1]--- 85: 02 # [2]. type=KeyUsage (2) 86: 18 60 # [3]. value=96: [keyCertSign, cRLSign] #---extension[2]--- 88: 23 # [4]. type=BasicConstraints, critical (-4) 89: 20 # [5]. value=-1: CA: true, # pathLenConstraint: unlimited #---extension[3]--- 90: 08 # [6]. type=ExtendedKeyUsage (8) 91: 01 # [7]. value=serverAuth (1) 92: 58 40 # [10]. signature value=byte[64] 94: 8A25E8AABBA4B19B8E0D1596A476C2C42F5068F5F3457606806E2F284A 123: 22E6E7017CEE1E3B865C5EEA2A7946503C5BA1C39424F71ACDC6AFA5FB 152: 55F7E397B83C ]]>
Weierstrass EC Public Key On Curve secp384r1
  • Self-signed certificate
  • EC public key on the curve secp384r1
  • Signature algorithm: ECDSA with SHA-384
  • Subject: a commonName containing free-form text
  • Extensions
    • Basic Constraints: CA, with pathLenConstraint
    • Extended Key Usage: only an OID-identified usage
    • Certificate Policies
    • Inhibit anyPolicy
Private Key
X.509 Certificate PEM content (DER encoding: 539 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (309 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (309 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 72 # [6]. subject=char[18] 18: 73656C667369676E2D73656370333834 # "selfsign-secp384" 34: 7231 # "r1" 36: 02 # [7]. subjectPublicKeyAlg=EC public key on # curve secp384r1 (2) 37: 58 61 # [8]. subject public key=EC point=byte[97] 39: 04DD6762F035899451372B2FE9B52A8314AD10E2C4363C5A5849E296FE 68: 51AAB9BFD03AB038D33418A0BCD83280ABA0BD9104017165C048B5346B 97: 54109E449FCC889E4EE870B5F8A2C63DAE414DE19755BE278A175E040D 126: 4A4C1A0EE46E924A5C29 136: 8A # [9]. extensions=array[10] #---extension[0]--- 137: 02 # [0]. type=KeyUsage (2) 138: 18 60 # [1]. value=96: [keyCertSign, cRLSign] #---extension[1]--- 140: 23 # [2]. type=BasicConstraints, critical (-4) 141: 01 # [3]. value=1: CA: true, pathLenConstraint: # 1 #---extension[2]--- 142: 06 # [4]. type=CertificatePolicies (6) 143: 84 # [5]. value=array[4] #---CertificatePolicy[0]--- 144: 03 # [0]. PolicyIdentifier=individual-validat # ed (3) 145: 80 # [1]. PolicyQualifierInfos=array[0] #---CertificatePolicy[1]--- 146: 00 # [2]. PolicyIdentifier=anyPolicy (0) 147: 84 # [3]. PolicyQualifierInfos=array[4] #---PolicyQualifierInfo[0]--- 148: 01 # [0]. policyQualifierId=domain-validate # d (1) 149: 76 # [1]. qualifier=char[22] 150: 687474703A2F2F6370732E6578616D # "http://cps.exam" 165: 706C652E636F6D # "ple.com" #---PolicyQualifierInfo[1]--- 172: 02 # [2]. policyQualifierId=organization-va # lidated (2) 173: 77 # [3]. qualifier=char[23] 174: 746869732069732074686520757365 # "this is the use" 189: 72206E6F74696365 # "r notice" #---extension[3]--- 197: 08 # [6]. type=ExtendedKeyUsage (8) 198: 49 # [7]. value=byte[9]: 199: 2B0601040181FD5904 # oid: 1.3.6.1.4.1.32473.4 #---extension[4]--- 208: 18 1E # [8]. type=InhibitAnyPolicy (30) 210: 00 # [9]. value=simple-uint(0) 211: 58 60 # [10]. signature value=byte[96] 213: 347EB5ED49E1F6536E2A3F3B5DF1C12D9BAEF440DFBC42BD45D31F4B3F 242: DABDFA9D685A84582D98B1B2474210F1C785DA055BE26787AB4DD58FD3 271: 30E3435AC84EBE49A4382FB964591C3EACC9A04F3814FC2964C1B4B201 300: C013AE7CCB3727CDF7 ]]>
Weierstrass EC Public Key On Curve secp521r1
  • Self-signed certificate
  • EC public key on the curve secp521r1
  • Signature algorithm: ECDSA with SHA-512
  • Subject: empty
  • Extensions
    • Basic Constraints: non-CA
    • Extended Key Usage: integer-identified and OID-identified usages
    • Subject Alternative Name
Private Key
X.509 Certificate PEM content (DER encoding: 811 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (531 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (531 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 72 # [6]. subject=char[18] 18: 73656C667369676E2D73656370353231 # "selfsign-secp521" 34: 7231 # "r1" 36: 03 # [7]. subjectPublicKeyAlg=EC public key on # curve secp521r1 (3) 37: 58 85 # [8]. subject public key=EC point=byte[133] 39: 04005538CE8F7CDE229335C85958AACD029DDF65CFC2A72A75055E63B8 68: FE59D07FB4BDF10DB7B8BA7D57C5C691EB96EAB97411615A6A430E5178 97: 7031719CEBC305E69200705CC828B9755F8FD53452B777A40CB6792554 126: E5718BAB91EA3F03086A4072A47047CEEC2493C384045FCC6ED8E4F748 155: A5223AF12901EB2E19A6C288951C939B05 172: 88 # [9]. extensions=array[8] #---extension[0]--- 173: 02 # [0]. type=KeyUsage (2) 174: 01 # [1]. value=1: [digitalSignature] #---extension[1]--- 175: 03 # [2]. type=SubjectAlternativeName (3) 176: 96 # [3]. value=array[22] #---GeneralName[0]--- 177: 04 # [0]. GeneralNameType=4: directoryName 178: 84 # [1]. GeneralNameValue=array[4], 2 # attributes #---attribute[0]--- 179: 04 # [0]. type=4: country 180: 62 # [1]. value=char[2] 181: 4445 # "DE" #---attribute[1]--- 183: 01 # [2]. type=1: commonName 184: 67 # [3]. value=char[7] 185: 6578616D706C65 # "example" #---GeneralName[1]--- 192: 02 # [2]. GeneralNameType=2: dNSName 193: 6F # [3]. GeneralNameValue=char[15] 194: 6162632E6578616D706C652E636F6D # "abc.example.com" #---GeneralName[2]--- 209: 01 # [4]. GeneralNameType=1: rfc822Name 210: 6F # [5]. GeneralNameValue=char[15] 211: 616263406578616D706C652E636F6D # "abc@example.com" #---GeneralName[3]--- 226: 21 # [6]. GeneralNameType=-2: # on-SmtpUTF8Mailbox 227: 74 # [7]. GeneralNameValue=char[20] 228: 736D747075746638406578616D706C65 # "smtputf8@example" 244: 2E636F6D # ".com" #---GeneralName[4]--- 248: 06 # [8]. GeneralNameType=6: uri 249: 78 1C # [9]. GeneralNameValue=char[28] 251: 687474703A2F2F6D797572692E657861 # "http://myuri.exa" 267: 6D706C652E636F6D2F616263 # "mple.com/abc" #---GeneralName[5]--- 279: 08 # [10]. GeneralNameType=8: registeredID 280: 49 # [11]. GeneralNameValue=byte[9]: 281: 2B0601040181FD5908 # oid: 1.3.6.1.4.1.32473.8 #---GeneralName[6]--- 290: 07 # [12]. GeneralNameType=7: iPAddress 291: 44 # [13]. GeneralNameValue=byte[4] 292: 11111111 #---GeneralName[7]--- 296: 00 # [14]. GeneralNameType=0: otherName 297: 82 # [15]. GeneralNameValue=array[2] 298: 49 # [0]. id=byte[9]: 299: 2B0601040181FD5901 # oid: 1.3.6.1.4.1.32473.1 308: 4C # [1]. value=byte[12] 309: 040A22222222222222222222 #---GeneralName[8]--- 321: 22 # [16]. GeneralNameType=-3: on-MACAddress 322: 46 # [17]. GeneralNameValue=byte[6] 323: 222222222222 #---GeneralName[9]--- 329: 21 # [18]. GeneralNameType=-2: # on-SmtpUTF8Mailbox 330: 78 1C # [19]. GeneralNameValue=char[28] 332: 736D74702E757466386D61696C626F78 # "smtp.utf8mailbox" 348: 406578616D706C652E636F6D # "@example.com" #---GeneralName[10]--- 360: 20 # [20]. GeneralNameType=-1: # on-hardwareModuleName 361: 82 # [21]. GeneralNameValue=array[2] 362: 49 # [0]. id=byte[9]: 363: 2B0601040181FD5902 # oid: 1.3.6.1.4.1.32473.2 372: 52 # [1]. value=byte[18] 373: 041033333333333333333333333333333333 #---extension[2]--- 391: 23 # [4]. type=BasicConstraints, critical (-4) 392: 21 # [5]. value=-2: CA: false #---extension[3]--- 393: 08 # [6]. type=ExtendedKeyUsage (8) 394: 82 # [7]. value=array[2] 395: 02 # clientAuth (2) 396: 01 # serverAuth (1) 397: 58 84 # [10]. signature value=byte[132] 399: 012F8358F64621CA68F7DB644AEFE37958041A686436AFCEDDE70ACEBA 428: 73744D70147784A41AD67673A1EE5B3B9B1A8351553A29E87815ABFCCA 457: 5D1DE1099F284B4C013D3594A3444D9D9E9048B5505F17E183FD49EC74 486: C0372823602D057B6A9C86C8238C29135D4EC6C10ABCE9CE22144AF857 515: 0C6D4ED42D4576F2CF6A38C975F5EA48 ]]>
Weierstrass EC Public Key On Curve sm2p256v1
  • Self-signed certificate
  • EC public key on the curve sm2p256v1
  • Signature algorithm: SM2 with SM3
  • Subject:
    • serialNumber
    • organization
    • organizationalUnit
    • organizationIdentifier
  • Extensions:
    • Policy Constraints containing only inhibitPolicyMapping
    • Name Constraints containing only excludedSubTrees
Private Key
X.509 Certificate PEM content (DER encoding: 644 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (326 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (326 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 8A # [6]. subject=array[10], 5 attributes #---attribute[0]--- 18: 01 # [0]. type=1: commonName 19: 72 # [1]. value=char[18] 20: 73656C667369676E2D736D3270323536 # "selfsign-sm2p256" 36: 7631 # "v1" #---attribute[1]--- 38: 03 # [2]. type=3: serialNumber 39: 6F # [3]. value=char[15] 40: 6D792073657269616C4E756D626572 # "my serialNumber" #---attribute[2]--- 55: 08 # [4]. type=8: organization 56: 6F # [5]. value=char[15] 57: 6D79206F7267616E697A6174696F6E # "my organization" #---attribute[3]--- 72: 09 # [6]. type=9: organizationalUnit 73: 75 # [7]. value=char[21] 74: 6D79206F7267616E697A6174696F6E61 # "my organizationa" 90: 6C556E6974 # "lUnit" #---attribute[4]--- 95: 12 # [8]. type=18: organizationIdentifier 96: 78 19 # [9]. value=char[25] 98: 6D79206F7267616E697A6174696F6E49 # "my organizationI" 114: 64656E746966696572 # "dentifier" 123: 06 # [7]. subjectPublicKeyAlg=EC public key on # curve sm2p256v1 (6) 124: 58 41 # [8]. subject public key=EC point=byte[65] 126: 0495FFF4BE8611C8149C81ADEC14125DACCA746A2F3FE38CD2EAB711E8 155: C99F101FBB448423F166F9FFD98F0E321597BB394835A6FB240337A389 184: 12907A22C3F04A 191: 86 # [9]. extensions=array[6] #---extension[0]--- 192: 02 # [0]. type=KeyUsage (2) 193: 01 # [1]. value=1: [digitalSignature] #---extension[1]--- 194: 18 1A # [2]. type=NameConstraints (26) 196: 82 # [3]. value=array[2] 197: F6 # [0]. permittedSubtrees= 198: 84 # [1]. excludedSubtrees=array[4] #---GeneralName[0]--- 199: 02 # [0]. GeneralNameType=2: dNSName 200: 78 19 # [1]. GeneralNameValue=char[25] 202: 6578636C756465642E646E73312E65 # "excluded.dns1.e" 217: 78616D706C652E636F6D # "xample.com" #---GeneralName[1]--- 227: 02 # [2]. GeneralNameType=2: dNSName 228: 78 19 # [3]. GeneralNameValue=char[25] 230: 6578636C756465642E646E73322E65 # "excluded.dns2.e" 245: 78616D706C652E636F6D # "xample.com" #---extension[2]--- 255: 18 1C # [4]. type=PolicyConstraints (28) 257: 82 # [5]. value=array[2] 258: F6 # [0]. requireExplicitPolicy= 259: 02 # [1]. inhibitPolicyMapping=2 260: 58 40 # [10]. signature value=byte[64] 262: 59F40C77AE8AC0BD0638E0B822001FD47EEF15667C7034436A95C97E94 291: CEEE5FEFA1441C1F6537A76692605BED70A1168D2AFE6B03B4E9F92502 320: 4D1B76729555 ]]>
Weierstrass EC Public Key On Curve brainpoolP256r1
  • Self-signed certificate
  • EC public key on the curve brainpoolP256r1
  • Signature algorithm: ECDSA with SHAKE128
  • Subject:
    • country
    • state
    • locality
    • postalCode
    • street
  • Extensions: a single non-critical keyUsage extension
Private Key
X.509 Certificate PEM content (DER encoding: 527 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (234 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (234 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 8C # [6]. subject=array[12], 6 attributes #---attribute[0]--- 18: 01 # [0]. type=1: commonName 19: 78 18 # [1]. value=char[24] 21: 73656C667369676E2D627261696E706F # "selfsign-brainpo" 37: 6F6C703235367231 # "olp256r1" #---attribute[1]--- 45: 04 # [2]. type=4: country 46: 62 # [3]. value=char[2] 47: 4445 # "DE" #---attribute[2]--- 49: 05 # [4]. type=5: locality 50: 6B # [5]. value=char[11] 51: 6D79206C6F63616C697479 # "my locality" #---attribute[3]--- 62: 06 # [6]. type=6: state 63: 68 # [7]. value=char[8] 64: 6D79207374617465 # "my state" #---attribute[4]--- 72: 07 # [8]. type=7: street 73: 69 # [9]. value=char[9] 74: 6D7920737472656574 # "my street" #---attribute[5]--- 83: 0C # [10]. type=12: postalCode 84: 6D # [11]. value=char[13] 85: 6D7920706F7374616C436F6465 # "my postalCode" 98: 18 18 # [7]. subjectPublicKeyAlg=EC public key on # curve brainpoolp256r1 (24) 100: 58 41 # [8]. subject public key=EC point=byte[65] 102: 0477B077412EE98950779ED882FFCB1648E014272354469624F5BCE2F1 131: 4F3242AD4ACC5686A86508D59FB729FDC29811188D8BF016CE4A515105 160: 4DAF888C48D5ED 167: 01 # [9]. extensions=1, KeyUsage: # [digitalSignature] 168: 58 40 # [10]. signature value=byte[64] 170: 59752E7778EE3554514B2AE659C7AAA9D05EFA187040175BC4E8BC3707 199: 19F7EC1CF4CD207025D829F044D2345144A5EFF51EEC84FDF842BEB7BF 228: 2A7DC398C2FF ]]>
Weierstrass EC Public Key On Curve brainpoolP384r1
  • Self-signed certificate
  • EC public key on the curve brainpoolP384r1
  • Signature algorithm: ECDSA with SHA-384
  • Subject:
    • surname
    • givenName
    • title
    • name
  • Extensions: a single critical keyUsage extension
Private Key
X.509 Certificate PEM content (DER encoding: 558 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (291 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (291 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 8A # [6]. subject=array[10], 5 attributes #---attribute[0]--- 18: 01 # [0]. type=1: commonName 19: 78 18 # [1]. value=char[24] 21: 73656C667369676E2D627261696E706F # "selfsign-brainpo" 37: 6F6C703338347231 # "olp384r1" #---attribute[1]--- 45: 02 # [2]. type=2: surname 46: 6A # [3]. value=char[10] 47: 6D79207375726E616D65 # "my surname" #---attribute[2]--- 57: 0A # [4]. type=10: title 58: 68 # [5]. value=char[8] 59: 6D79207469746C65 # "my title" #---attribute[3]--- 67: 0D # [6]. type=13: givenName 68: 6C # [7]. value=char[12] 69: 6D7920676976656E4E616D65 # "my givenName" #---attribute[4]--- 81: 18 19 # [8]. type=25: name 83: 67 # [9]. value=char[7] 84: 6D79206E616D65 # "my name" 91: 18 19 # [7]. subjectPublicKeyAlg=EC public key on # curve brainpoolp384r1 (25) 93: 58 61 # [8]. subject public key=EC point=byte[97] 95: 046709C992919B49C48FD931D05C497D3865E6084C91DF3A4C7E781F41 124: 8543B023D59E8BF25D133FB1A094E9D42C8FA6ED3B46E9883A35ABD4B0 153: A9D30AAEFD9B7E88ED3800565D1E7F0633134D6519292D49BD55EC30A1 182: 67197FEC0F7429822B95 192: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 193: 58 60 # [10]. signature value=byte[96] 195: 6709C992919B49C48FD931D05C497D3865E6084C91DF3A4C7E781F4185 224: 43B023D59E8BF25D133FB1A094E9D42C8FA6ED044B66390705F1CA0A28 253: E46FE52335870695F63EC8361EC46BB9AF5FA0E7A3C19D4C9DED6C7F83 282: EA83F837922AE10833 ]]>
Weierstrass EC Public Key On Curve brainpoolP512r1
  • Self-signed certificate
  • EC public key on the curve brainpoolP512r1
  • Signature algorithm: ECDSA with SHAKE256
  • Subject:
    • jurisdictionCountryName
    • jurisdictionStateOrProvinceName
    • jurisdictionLocalityName
  • Extensions:
    • Subject Information Access
    • Policy Mappings
Private Key
X.509 Certificate PEM content (DER encoding: 779 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (421 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (421 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 88 # [6]. subject=array[8], 4 attributes #---attribute[0]--- 18: 01 # [0]. type=1: commonName 19: 78 18 # [1]. value=char[24] 21: 73656C667369676E2D627261696E706F # "selfsign-brainpo" 37: 6F6C703531327231 # "olp512r1" #---attribute[1]--- 45: 13 # [2]. type=19: jurisdictionLocalityName 46: 77 # [3]. value=char[23] 47: 6D79206A7572697364696374696F6E4C # "my jurisdictionL" 63: 6F63616C697479 # "ocality" #---attribute[2]--- 70: 14 # [4]. type=20: # jurisdictionStateOrProvinceName 71: 74 # [5]. value=char[20] 72: 6D79206A7572697364696374696F6E53 # "my jurisdictionS" 88: 74617465 # "tate" #---attribute[3]--- 92: 15 # [6]. type=21: jurisdictionCountryName 93: 62 # [7]. value=char[2] 94: 5345 # "SE" 96: 18 1A # [7]. subjectPublicKeyAlg=EC public key on # curve brainpoolp512r1 (26) 98: 58 81 # [8]. subject public key=EC point=byte[129] 100: 046D327067D334CE53FA29317AA207B85CA237623F19A10C594BF024FC 129: 3FFEB64FAB5884D0D448A271552E02E7CF44D8BF104DA182CEC1DE895C 158: 8418B8529D9B8B2C4B80A736DDC56471D6A52C6CE414E69D57356B15FC 187: 08A46B61FA5B721FABC76932F3836DADE4F70F6F0CACB8D3351A7EB54E 216: FF077C402368C49BB715B53458 229: 86 # [9]. extensions=array[6] #---extension[0]--- 230: 02 # [0]. type=KeyUsage (2) 231: 01 # [1]. value=1: [digitalSignature] #---extension[1]--- 232: 18 1B # [2]. type=PolicyMappings (27) 234: 84 # [3]. value=array[4] #---policyMapping[0]--- 235: 02 # [0]. issuerDomainPolicy=organization-val # idated (2) 236: 01 # [1]. subjectDomainPolicy=domain-validate # d (1) #---policyMapping[1]--- 237: 49 # [2]. issuerDomainPolicy=byte[9]: 238: 2B0601040181FD5906 # oid: 1.3.6.1.4.1.32473.6 247: 49 # [3]. subjectDomainPolicy=byte[9]: 248: 2B0601040181FD5907 # oid: 1.3.6.1.4.1.32473.7 #---extension[2]--- 257: 18 1F # [4]. type=SubjectInfoAccess (31) 259: 82 # [5]. value=array[2] #---AccessDescription[0]--- 260: 02 # [0]. accessMethod=caIssuers (2) 261: 78 1C # [1]. uri=char[28] 263: 687474703A2F2F636169737375657273 # "http://caissuers" 279: 2E6578616D706C652E636F6D # ".example.com" 291: 58 80 # [10]. signature value=byte[128] 293: 4AC21BF982E447734E6157731B4CC730F800BFBF2AB1543DB4E2C4788A 322: B71AE7D22CA93DEDBF4B4010C8F01A41A4BAD7FE91BE915AD3176F9733 351: 47D7496DF467273D13DCA4CCF3BA9E4AD5C5EF33BC4F59E053E955E040 380: A35EE73EAA48C70C7494AE539E418F1155B45B9B521A62014E0A134562 409: 4C3FA57C363C9FDF25FFB727 ]]>
Weierstrass EC Public Key On Curve frp256v1
  • Self-signed certificate
  • EC public key on the curve frp256v1
  • Signature algorithm: ECDSA with SHA-1
  • Subject:
    • emailAddress
    • telephoneNumber
    • businessCategory
  • Extensions:
    • Policy Constraints containing only requireExplicitPolicy
    • Name Constraints containing only permittedSubTrees
Private Key
X.509 Certificate PEM content (DER encoding: 584 bytes): Textual Representation: ### C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (303 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (303 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: 88 # [6]. subject=array[8], 4 attributes #---attribute[0]--- 19: 00 # [0]. type=0: emailAddress 20: 6F # [1]. value=char[15] 21: 616263406578616D706C652E6F7267 # "abc@example.org" #---attribute[1]--- 36: 01 # [2]. type=1: commonName 37: 71 # [3]. value=char[17] 38: 73656C667369676E2D66727032353676 # "selfsign-frp256v" 54: 31 # "1" #---attribute[2]--- 55: 0B # [4]. type=11: businessCategory 56: 73 # [5]. value=char[19] 57: 6D7920627573696E6573734361746567 # "my businessCateg" 73: 6F7279 # "ory" #---attribute[3]--- 76: 18 1A # [6]. type=26: telephoneNumber 78: 72 # [7]. value=char[18] 79: 6D792074656C6570686F6E654E756D62 # "my telephoneNumb" 95: 6572 # "er" 97: 18 1B # [7]. subjectPublicKeyAlg=EC public key on # curve frp256v1 (27) 99: 58 41 # [8]. subject public key=EC point=byte[65] 101: 04378D2D28A1F6547124F2DB6A42F63915BFA2F6537AE20CF0417D675F 130: BE6603DA80A4CF3F1E43633343AB3BE80150EC04E9649DD62705BC055B 159: DCDA791EB25062 166: 86 # [9]. extensions=array[6] #---extension[0]--- 167: 02 # [0]. type=KeyUsage (2) 168: 01 # [1]. value=1: [digitalSignature] #---extension[1]--- 169: 18 1A # [2]. type=NameConstraints (26) 171: 82 # [3]. value=array[2] 172: 84 # [0]. permittedSubtrees=array[4] #---GeneralName[0]--- 173: 02 # [0]. GeneralNameType=2: dNSName 174: 78 1A # [1]. GeneralNameValue=char[26] 176: 7065726D69747465642E646E73312E # "permitted.dns1." 191: 6578616D706C652E636F6D # "example.com" #---GeneralName[1]--- 202: 02 # [2]. GeneralNameType=2: dNSName 203: 78 1A # [3]. GeneralNameValue=char[26] 205: 7065726D69747465642E646E73322E # "permitted.dns2." 220: 6578616D706C652E636F6D # "example.com" 231: F6 # [1]. excludedSubtrees= #---extension[2]--- 232: 18 1C # [4]. type=PolicyConstraints (28) 234: 82 # [5]. value=array[2] 235: 01 # [0]. requireExplicitPolicy=1 236: F6 # [1]. inhibitPolicyMapping= 237: 58 40 # [10]. signature value=byte[64] 239: 378D2D28A1F6547124F2DB6A42F63915BFA2F6537AE20CF0417D675FBE 268: 6603DA6F2D4CE3787CBACE549599BC5F3BAACCA2B7E67352E4A6BA1F44 297: 96CEAD53D8E6 ]]>
Montgomery EC Public Key On Curve X25519
  • X25519 public key
  • Signature algorithm: Ed25519
  • Extensions
    • ASIdentifiers
    • ASIdentifiers V2
    • IPAddrBlocks with SAFI = null and IP Address Choice = null
    • IPAddrBlocks V2 with SAFI = null and IP Address Choice = null
    • authorityKeyIdentifier containing only the keyIdentifier component
    • authorityInfoAccess
    • issuerAltName
This certificate only demonstrates the encoding of the extensions listed above. The CA certificate in contains neither the ASIdentifiers nor the IPAddrBlocks extension, so the AS and IP resources of this certificate are not a subset of the resources of its issuer, and validation of this certificate according to fails.
Private Key
X.509 Certificate
  • Issued by the CA in .
PEM content (DER encoding: 798 bytes): Textual Representation: Subject Public Key Info: Public Key Algorithm: X25519 Pub: 8a:ff:51:6f:ac:71:24:41:50:e7:0f:92:77:f4:ad:f7:fb:29: f4:1a:7a:4a:88:28:bd:47:67:22:fc:1b:7f:08 X509v3 extensions: X509v3 keyUsage: keyEncipherment, keyEncipherment X509v3 authorityKeyIdentifier: 7f:cd:b8:2d:04:95:2e:1a:36:b9:0a:f3:7a:3c:f1:66:d1:5e:f9:21 X509v3 authorityInfoAccess: OCSP: URI: http://ocsp.example.com CA Issuers: URI: http://caissuers.example.com ad-caRepository: URI: http://carepository.example.com ad-timeStamping: URI: http://timestamping.example.com ad-caRepository: URI: http://carepository.example.com RPKI Manifest: URI: http://rpkimanifest.example.com Signed Object: URI: http://signedobject.example.com RPKI Notify: URI: http://rpkinotify.example.com 1.3.6.1.4.1.32473.3: URI: http://1234.example.com X509v3 issuerAlternativeName: 30:0d:82:0b:65:78:61:6d:70:6c:65:2e:63:6f:6d X509v3 sbgp-ipAddrBlock: IPv4: inherit IPv6: inherit X509v3 sbgp-autonomousSysNum: Autonomous System Numbers: 2 5-8 X509v3 sbgp-ipAddrBlockV2: IPv4 unicast: inherit IPv6 unicast: inherit X509v3 sbgp-autonomousSysNumV2: Autonomous System Numbers: inherit Signature Algorithm: ED25519 Signature Value: 9c:5b:99:e8:ef:2d:d7:ff:9b:05:d3:c8:d0:ad:7a:7e:68:f8: e4:d6:d2:6e:05:48:99:42:2c:19:5e:61:06:ff:c7:35:88:9a: 8d:e1:24:7c:58:b0:19:05:44:99:14:e8:23:76:6e:e9:cd:9e: b8:9b:e7:90:6b:c0:c3:83:59:06 ]]>
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (487 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate
  • Issued by the CA in .
Plain hex (487 bytes): Annotated hex: 398: F6 # [2]. IP Address Choice= #---IPAddrBlocks[1]--- 399: 02 # [3]. AFI=2: IPv6 400: F6 # [4]. SAFI= 401: F6 # [5]. IP Address Choice= #---extension[5]--- 402: 18 21 # [10]. type=ASIdentifiers (33) 404: 82 # [11]. value=array[2] 405: 02 # [0]. id=2 406: 82 # [1]. range=array[2] 407: 03 # [0]. min=3 408: 03 # [1]. max=3 #---extension[6]--- 409: 18 22 # [12]. type=IPAddrBlocksV2 (34) 411: 86 # [13]. value=array[6] #---IPAddrBlocks[0]--- 412: 01 # [0]. AFI=1: IPv4 413: 01 # [1]. SAFI=1: unicast 414: F6 # [2]. IP Address Choice= #---IPAddrBlocks[1]--- 415: 02 # [3]. AFI=2: IPv6 416: 01 # [4]. SAFI=1: unicast 417: F6 # [5]. IP Address Choice= #---extension[7]--- 418: 18 23 # [14]. type=ASIdentifiersV2 (35) 420: F6 # [15]. value= 421: 58 40 # [10]. signature value=byte[64] 423: 14644423BAED670A0980AF13D6745A4826895E829E017ED156FC6CF065 452: 608C53C16A4BCCB4233F6C395BA26F575A719860851E289E2E8740B0A8 481: 38F67164960C ]]>
Montgomery EC Public Key On Curve X448
  • X448 public key
  • Signature algorithm: Ed25519
  • Extensions:
    • authorityKeyIdentifier containing all fields
    • crlDistributionPoints
    • freshestCRL
    • IPAddrBlocks with non-null SAFI and IntIPAddressChoice
    • IPAddrBlocks V2 with non-null SAFI, IntIPAddressChoice and IPAddressChoice
This certificate only demonstrates the encoding of the extensions listed above. The CA certificate in does not contain the IPAddrBlocks extension, so the IP resources of this certificate are not a subset of the resources of its issuer, and validation of this certificate according to fails.
Private Key
X.509 Certificate
  • Issued by the CA in .
PEM content (DER encoding: 732 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (480 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate
  • Issued by the CA in .
Plain hex (480 bytes): Annotated hex: 306: 83 # [2]. IntIPAddressChoice=array[3] 307: 1A 01C00002 # [0]. AddressPrefix=29360130 312: 1B 00000005C47363FE # [1]. AddressPrefix=24770733054 321: 3B 00000005C468638E # [2]. AddressPrefix=-24770012047 #---IPAddrBlocks[1]--- 330: 02 # [3]. AFI=2: IPv6 331: F6 # [4]. SAFI= 332: 82 # [5]. IntIPAddressChoice=array[2] 333: 1B 000120010DB81234 # [0]. AddressPrefix=31666387393387 # 6 342: 82 # [1]. AddressRange=array[2] 343: 3B 000120010C78132D # [0]. min=-316663852962606 352: 09 # [1]. max=9 #---extension[5]--- 353: 18 22 # [10]. type=IPAddrBlocksV2 (34) 355: 86 # [11]. value=array[6] #---IPAddrBlocks[0]--- 356: 01 # [0]. AFI=1: IPv4 357: 01 # [1]. SAFI=1: unicast 358: 83 # [2]. IntIPAddressChoice=array[3] 359: 1A 01C00002 # [0]. AddressPrefix=29360130 364: 1B 00000005C47363FE # [1]. AddressPrefix=24770733054 373: 3B 00000005C468638E # [2]. AddressPrefix=-24770012047 #---IPAddrBlocks[1]--- 382: 02 # [3]. AFI=2: IPv6 383: 01 # [4]. SAFI=1: unicast 384: 82 # [5]. IPAddressChoice=array[2] 385: 47 # [0]. AddressPrefix=byte[7] 386: 0020010DB81234 393: 82 # [1]. AddressRange=array[2] 394: 45 # [0]. min=byte[5] 395: 003FFF0003 400: 4D # [1]. max=byte[13] 401: 003FFF01220000223333445566 414: 58 40 # [10]. signature value=byte[64] 416: 025DEF6470DBC00E051E38E16CB1C90EE2B74B6809738A70D09A0F1E02 445: E52ADD47F6F1544137069C7D851AA1FD373C170872E47EF5D6AE13D316 474: 99C9A1E7E500 ]]>
Ed25519 Public Key
  • Self-signed certificate
  • Edwards public key Ed25519
  • Signature algorithm: Ed25519
  • Subject:
    • domainComponent
    • dnQualifier
    • dmdName
    • unstructuredName
    • unstructuredAddress
    • generationQualifier
  • Extensions:
    • Policy Constraints containing both requireExplicitPolicy and inhibitPolicyMapping
    • Name Constraints containing both permittedSubTrees and excludedSubTrees
Private Key
X.509 Certificate PEM content (DER encoding: 784 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (384 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (384 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 8E # [6]. subject=array[14], 7 attributes #---attribute[0]--- 18: 01 # [0]. type=1: commonName 19: 70 # [1]. value=char[16] 20: 73656C667369676E2D65643235353139 # "selfsign-ed25519" #---attribute[1]--- 36: 0F # [2]. type=15: generationQualifier 37: 76 # [3]. value=char[22] 38: 6D792067656E65726174696F6E517561 # "my generationQua" 54: 6C6966696572 # "lifier" #---attribute[2]--- 60: 10 # [4]. type=16: DNQualifier 61: 6E # [5]. value=char[14] 62: 6D7920646E5175616C6966696572 # "my dnQualifier" #---attribute[3]--- 76: 16 # [6]. type=22: domainComponent 77: 72 # [7]. value=char[18] 78: 6D7920646F6D61696E436F6D706F6E65 # "my domainCompone" 94: 6E74 # "nt" #---attribute[4]--- 96: 18 1B # [8]. type=27: DMDName 98: 6A # [9]. value=char[10] 99: 6D7920646D644E616D65 # "my dmdName" #---attribute[5]--- 109: 18 1D # [10]. type=29: unstructuredName 111: 73 # [11]. value=char[19] 112: 6D7920756E737472756374757265644E # "my unstructuredN" 128: 616D65 # "ame" #---attribute[6]--- 131: 18 1E # [12]. type=30: unstructuredAddress 133: 76 # [13]. value=char[22] 134: 6D7920756E7374727563747572656441 # "my unstructuredA" 150: 646472657373 # "ddress" 156: 0C # [7]. subjectPublicKeyAlg=Ed25519 (12) 157: 58 20 # [8]. subject public key=EC point=byte[32] 159: 46270AEC0F32837E128779D30B249C531D6D42C1AC29E402328EDC79FA 188: C2BE95 191: 86 # [9]. extensions=array[6] #---extension[0]--- 192: 02 # [0]. type=KeyUsage (2) 193: 01 # [1]. value=1: [digitalSignature] #---extension[1]--- 194: 18 1A # [2]. type=NameConstraints (26) 196: 82 # [3]. value=array[2] 197: 84 # [0]. permittedSubtrees=array[4] #---GeneralName[0]--- 198: 02 # [0]. GeneralNameType=2: dNSName 199: 78 1A # [1]. GeneralNameValue=char[26] 201: 7065726D69747465642E646E73312E # "permitted.dns1." 216: 6578616D706C652E636F6D # "example.com" #---GeneralName[1]--- 227: 02 # [2]. GeneralNameType=2: dNSName 228: 78 1A # [3]. GeneralNameValue=char[26] 230: 7065726D69747465642E646E73322E # "permitted.dns2." 245: 6578616D706C652E636F6D # "example.com" 256: 84 # [1]. excludedSubtrees=array[4] #---GeneralName[0]--- 257: 02 # [0]. GeneralNameType=2: dNSName 258: 78 19 # [1]. GeneralNameValue=char[25] 260: 6578636C756465642E646E73312E65 # "excluded.dns1.e" 275: 78616D706C652E636F6D # "xample.com" #---GeneralName[1]--- 285: 02 # [2]. GeneralNameType=2: dNSName 286: 78 19 # [3]. GeneralNameValue=char[25] 288: 6578636C756465642E646E73322E65 # "excluded.dns2.e" 303: 78616D706C652E636F6D # "xample.com" #---extension[2]--- 313: 18 1C # [4]. type=PolicyConstraints (28) 315: 82 # [5]. value=array[2] 316: 01 # [0]. requireExplicitPolicy=1 317: 02 # [1]. inhibitPolicyMapping=2 318: 58 40 # [10]. signature value=byte[64] 320: 213CF14F253BCECA58A1CDF0AAD3565E01D6612461F86DBACC6E014099 349: 5AC3EEF507AF1341D604243751562CCB363B0C72C989E9D2F260C59422 378: 8342AFAC7B00 ]]>
Ed448 Public Key
  • Self-signed certificate
  • Edwards public key Ed448
  • Signature algorithm: Ed448
  • Subject:
    • initials
    • pseudonym
    • userId
  • Extensions:
    • OCSP No Check
    • TLS Features
Private Key
X.509 Certificate PEM content (DER encoding: 503 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (261 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (261 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 88 # [6]. subject=array[8], 4 attributes #---attribute[0]--- 18: 01 # [0]. type=1: commonName 19: 6E # [1]. value=char[14] 20: 73656C667369676E2D6564343438 # "selfsign-ed448" #---attribute[1]--- 34: 0E # [2]. type=14: initials 35: 6B # [3]. value=char[11] 36: 6D7920696E697469616C73 # "my initials" #---attribute[2]--- 47: 11 # [4]. type=17: pseudonym 48: 6C # [5]. value=char[12] 49: 6D792070736575646F6E796D # "my pseudonym" #---attribute[3]--- 61: 18 1C # [6]. type=28: userID 63: 69 # [7]. value=char[9] 64: 6D7920757365726964 # "my userid" 73: 0D # [7]. subjectPublicKeyAlg=Ed448 (13) 74: 58 39 # [8]. subject public key=EC point=byte[57] 76: 8C35E491DB58702D7B99167C19F86B2681EA25D21F83AC6EC78040A904 105: 114FCB1DCF239F6C4D845147F7E22793A891A9F9CA5D1E20A7398C80 133: 86 # [9]. extensions=array[6] #---extension[0]--- 134: 02 # [0]. type=KeyUsage (2) 135: 01 # [1]. value=1: [digitalSignature] #---extension[1]--- 136: 18 24 # [2]. type=OCSPNoCheck (36) 138: F6 # [3]. value= #---extension[2]--- 139: 18 26 # [4]. type=TLSFeatures (38) 141: 82 # [5]. value=array[2] 142: 18 2C # [0]. cookie (44) 144: 10 # [1]. application layer protocol # negotiation (16) 145: 58 72 # [10]. signature value=byte[114] 147: 5E12D7D2F577CBDB36BA15DD9EA97B9BB9B49284210308CCFB2B1C2F9E 176: 2FF80398CC5D4F50293AFD24C5BCE3569379D344BCC4D31C6062A400EC 205: 582489B9F8B8CDCF0F4F2C2C38482A6201B78D9B222B8E7CF75431BDBE 234: 4FA9061B066DA656B5509F36D6005D0C2B602018B79E79C9A20A00 ]]>
Certificates With Different Signature Algorithms
RSASSA-PKCS1-v1_5 With SHA-1
  • Self-signed certificate
  • Signature algorithm: RSASSA-PKCS1-v1_5 with SHA-1
Private Key See .
X.509 Certificate PEM content (DER encoding: 463 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (303 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (303 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: 76 # [6]. subject=char[22] 19: 73656C667369676E2D7273612D776974 # "selfsign-rsa-wit" 35: 682D73686131 # "h-sha1" 41: 00 # [7]. subjectPublicKeyAlg=RSA (0) 42: 58 80 # [8]. subject public key=modulus=byte[128] 44: B8092F6F04726A921CFAB2D313AE9D2F01C7CE465FAB7DA62C7A5C73FA 73: CE5FFBA2F1DD80A29ADC43399CFCA22279B89A264810E5B926BB5E0D3F 102: 727A763E16013F89F8FEAC59D0FBDD5E8B0C52827E5490F13B84C3634E 131: 89C6D1731AE5F1A60F88ED118D080E1AB2CAA532D06C2F7D2A0874DEE4 160: E6B6E57283F6478DAF4253DB 172: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 173: 58 80 # [10]. signature value=byte[128] 175: 0150926C5642D9CB2AAA27A17B68FBBFC9F47AA42CD9E6779B4E9A7A81 204: C760589C53AC23BAD6A94F5A6B275BE292B79BA9CB59D045E44809353D 233: CE73C936A06EC20D51AE24C559DDB02EBF4B0838F515328058F601D91F 262: 6DAE5BFF55DC78DEB80970D2F74757FC5F96BE6F217825DC8286D9446C 291: CA0C9AF257FCE66CD963F891 ]]>
ECDSA With SHA-1
  • Signature algorithm: ECDSA with SHA-1
See .
ECDSA With SHA-256
  • Signature algorithm: ECDSA with SHA-256
See .
ECDSA With SHA-384
  • Signature algorithm: ECDSA with SHA-384
See .
ECDSA With SHA-512
  • Signature algorithm: ECDSA with SHA-512
See .
ECDSA With SHAKE128
  • Signature algorithm: ECDSA with SHAKE128
See .
ECDSA With SHAKE256
  • Signature algorithm: ECDSA with SHAKE256
See .
Unsigned
  • Signature algorithm: Unsigned
See .
SM2 With SM3
  • Signature algorithm: SM2 with SM3
See .
Ed25519
  • Signature algorithm: Ed25519
See .
Ed448
  • Signature algorithm: Ed448
See .
PoP With SHA-256 And HMAC-SHA256
  • Signature algorithm: PoP with SHA-256 and HMAC-SHA256
See .
PoP With SHA-384 And HMAC-SHA384
  • Signature algorithm: PoP with SHA-384 and HMAC-SHA384
See .
PoP With SHA-512 And HMAC-SHA512
  • Signature algorithm: PoP with SHA-512 and HMAC-SHA512
See .
RSASSA-PKCS1-v1_5 With SHA-256
  • Signature algorithm: RSASSA-PKCS1-v1_5 with SHA-256
See .
RSASSA-PKCS1-v1_5 With SHA-384
  • Signature algorithm: RSASSA-PKCS1-v1_5 with SHA-384
See .
RSASSA-PKCS1-v1_5 With SHA-512
  • Self-signed certificate
  • Signature algorithm: RSASSA-PKCS1-v1_5 with SHA-512
Private Key See .
X.509 Certificate PEM content (DER encoding: 467 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (306 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (306 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: 78 18 # [6]. subject=char[24] 20: 73656C667369676E2D7273612D776974 # "selfsign-rsa-wit" 36: 682D736861353132 # "h-sha512" 44: 00 # [7]. subjectPublicKeyAlg=RSA (0) 45: 58 80 # [8]. subject public key=modulus=byte[128] 47: B8092F6F04726A921CFAB2D313AE9D2F01C7CE465FAB7DA62C7A5C73FA 76: CE5FFBA2F1DD80A29ADC43399CFCA22279B89A264810E5B926BB5E0D3F 105: 727A763E16013F89F8FEAC59D0FBDD5E8B0C52827E5490F13B84C3634E 134: 89C6D1731AE5F1A60F88ED118D080E1AB2CAA532D06C2F7D2A0874DEE4 163: E6B6E57283F6478DAF4253DB 175: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 176: 58 80 # [10]. signature value=byte[128] 178: B5D4C31502957FBEE2E4DED7E45E723A8B9A86A46E9FEA1D87817808D1 207: ACE802370B91718755F101FFB3B971816120BE5CC05D2EE866422D78EF 236: 7D16AA78CE4011E4DC92AE1C7DA3C7831773A44A7B2F5BAFED5D2B8A6A 265: 4E6E49638B3335DC68B596AE5FC48360E1C7DD50BD457CF2CFDCF56F98 294: BE1EA3103B12DD5B6221DB21 ]]>
RSASSA-PSS With SHA-256
  • Self-signed certificate
  • Signature algorithm: RSASSA-PSS with SHA-256
Private Key See .
X.509 Certificate PEM content (DER encoding: 575 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (308 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (308 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: 78 1A # [6]. subject=char[26] 20: 73656C667369676E2D7273617373612D # "selfsign-rsassa-" 36: 7073732D736861323536 # "pss-sha256" 46: 00 # [7]. subjectPublicKeyAlg=RSA (0) 47: 58 80 # [8]. subject public key=modulus=byte[128] 49: B8092F6F04726A921CFAB2D313AE9D2F01C7CE465FAB7DA62C7A5C73FA 78: CE5FFBA2F1DD80A29ADC43399CFCA22279B89A264810E5B926BB5E0D3F 107: 727A763E16013F89F8FEAC59D0FBDD5E8B0C52827E5490F13B84C3634E 136: 89C6D1731AE5F1A60F88ED118D080E1AB2CAA532D06C2F7D2A0874DEE4 165: E6B6E57283F6478DAF4253DB 177: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 178: 58 80 # [10]. signature value=byte[128] 180: 4D8FB6928B9C34EF6E53A22DE2BED6579A58FB990CED4C7CC5B0227CBB 209: 210741B3C3DA6A72CFA764CEF937DABC9C373776FD882ABBD052936D6B 238: 4A14A12E628AF43CA89A6CAAC11513AA9C4438C668447FFF7497F32BE4 267: 45B58A4EA2E40E30C32165558EFB66E2B17640B93B061BD8BF5812818B 296: 318415E9F20FFE5EA50C9D39 ]]>
RSASSA-PSS With SHA-384
  • Self-signed certificate
  • Signature algorithm: RSASSA-PSS with SHA-384
Private Key See .
X.509 Certificate PEM content (DER encoding: 575 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (308 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (308 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: 78 1A # [6]. subject=char[26] 20: 73656C667369676E2D7273617373612D # "selfsign-rsassa-" 36: 7073732D736861333834 # "pss-sha384" 46: 00 # [7]. subjectPublicKeyAlg=RSA (0) 47: 58 80 # [8]. subject public key=modulus=byte[128] 49: B8092F6F04726A921CFAB2D313AE9D2F01C7CE465FAB7DA62C7A5C73FA 78: CE5FFBA2F1DD80A29ADC43399CFCA22279B89A264810E5B926BB5E0D3F 107: 727A763E16013F89F8FEAC59D0FBDD5E8B0C52827E5490F13B84C3634E 136: 89C6D1731AE5F1A60F88ED118D080E1AB2CAA532D06C2F7D2A0874DEE4 165: E6B6E57283F6478DAF4253DB 177: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 178: 58 80 # [10]. signature value=byte[128] 180: 62E00951C6AC6536337911F5568E8FCB79440A0A7A59EA7EEFFC20CD8A 209: 85E2111502116A040D14A209602BCD8F635D9B91689429F8B43D35FC79 238: A4B3AE34824D41B56D9472513673F7D13B2F77B81992B205DDFF91088C 267: CDF03E85A7F07471EFF6549AF07A77BBAE313D1B909DDF2EC94C67E0F2 296: 0A342CC25CFFF87A820CE9DC ]]>
RSASSA-PSS With SHA-512
  • Self-signed certificate
  • RSA public key with 1536-bit modulus
  • Signature algorithm: RSASSA-PSS with SHA-512
Private Key
X.509 Certificate PEM content (DER encoding: 703 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (436 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (436 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: 78 1A # [6]. subject=char[26] 20: 73656C667369676E2D7273617373612D # "selfsign-rsassa-" 36: 7073732D736861353132 # "pss-sha512" 46: 00 # [7]. subjectPublicKeyAlg=RSA (0) 47: 58 C0 # [8]. subject public key=modulus=byte[192] 49: B511729186EDC01B2335EC7E46AB1CF3B31FB8D46133CE350588EFD85E 78: D0876568B7BE006CE3527ABA643A1B0F8FA5EC5402229630442CFCE305 107: 0804CB03FA99E5BC3F8D48B3EEA94B420C26F8DEC7B78E8580A79E29AE 136: A0DC9BDC5973F89D9B3DB7E8BBEB0BFD357CE710D9EF39E4AB628B8612 165: 85DB90939F0D2FD01D8E9BC9717CF4C4E42FB17DCC522C42A9FA000B05 194: FFFBA9E24EE64B991C1E01824A9D5AFDC37EA11C81AF2A1FA82BD58940 223: AD7D4DB61F8DC688C48A686C45B1065626D3 241: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 242: 58 C0 # [10]. signature value=byte[192] 244: A2218182F9D326F7A5164835FF9B2D24927A5277D9482AB0A729D4321D 273: 66365D58A0DFADDABB6D6D57FF358CFB090DFDFE12EA0D1FCA209808AA 302: FAD0DC4F24F1ACA12B364B6922B93DD574737BA10B77B1BFF69512C4A3 331: 5692C03565E19EB8F3123A3B07063783A08F9AB93FEDCEAB7C2295F472 360: 26D4B6ED536E71BB7E671DD9D9BCC9BF592353C9BCEFFC0B78BC1615F4 389: C53C6B8EF403B606E6D89A3458AA16C786609F353E40F8EB5BACDA815B 418: 1BDDA10132BC8642EBBF6FF5D9AB1A11D272 ]]>
RSASSA-PSS With SHAKE128
  • Self-signed certificate
  • Signature algorithm: RSASSA-PSS with SHAKE128
Private Key See .
X.509 Certificate PEM content (DER encoding: 469 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (310 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (310 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: 78 1C # [6]. subject=char[28] 20: 73656C667369676E2D7273617373612D # "selfsign-rsassa-" 36: 7073732D7368616B65313238 # "pss-shake128" 48: 00 # [7]. subjectPublicKeyAlg=RSA (0) 49: 58 80 # [8]. subject public key=modulus=byte[128] 51: B8092F6F04726A921CFAB2D313AE9D2F01C7CE465FAB7DA62C7A5C73FA 80: CE5FFBA2F1DD80A29ADC43399CFCA22279B89A264810E5B926BB5E0D3F 109: 727A763E16013F89F8FEAC59D0FBDD5E8B0C52827E5490F13B84C3634E 138: 89C6D1731AE5F1A60F88ED118D080E1AB2CAA532D06C2F7D2A0874DEE4 167: E6B6E57283F6478DAF4253DB 179: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 180: 58 80 # [10]. signature value=byte[128] 182: 06B4F24DEFA5DC3C58E8C0B8E30A03C43A43A42B6EAD06458EE0FFB5EA 211: A443204DA030DFD19BCDCA2D5C0B4D6C848B5F9EC444C39CDF4C726388 240: 7D922AE17D8989A5F2046E6B4D2D9F114BA960DC55DFFFF775F9481F58 269: 0DAD43A984BAE37A650297C563C9AAA24CBFC3086BBCD6CAEE405E23ED 298: C9104DD16F653B47C9EB6B31 ]]>
RSASSA-PSS With SHAKE256
  • Self-signed certificate
  • Signature algorithm: RSASSA-PSS with SHAKE256
Private Key See .
X.509 Certificate PEM content (DER encoding: 597 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (438 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (438 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: 78 1C # [6]. subject=char[28] 20: 73656C667369676E2D7273617373612D # "selfsign-rsassa-" 36: 7073732D7368616B65323536 # "pss-shake256" 48: 00 # [7]. subjectPublicKeyAlg=RSA (0) 49: 58 C0 # [8]. subject public key=modulus=byte[192] 51: B511729186EDC01B2335EC7E46AB1CF3B31FB8D46133CE350588EFD85E 80: D0876568B7BE006CE3527ABA643A1B0F8FA5EC5402229630442CFCE305 109: 0804CB03FA99E5BC3F8D48B3EEA94B420C26F8DEC7B78E8580A79E29AE 138: A0DC9BDC5973F89D9B3DB7E8BBEB0BFD357CE710D9EF39E4AB628B8612 167: 85DB90939F0D2FD01D8E9BC9717CF4C4E42FB17DCC522C42A9FA000B05 196: FFFBA9E24EE64B991C1E01824A9D5AFDC37EA11C81AF2A1FA82BD58940 225: AD7D4DB61F8DC688C48A686C45B1065626D3 243: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 244: 58 C0 # [10]. signature value=byte[192] 246: 3C5A7DBA06D0918EB0397D881C60312E0668171E2644F9E30E05DC7623 275: 1AF177C8E1B460A763B31B7B869F2070602BB5749D627A7074973D4D49 304: ADF9A282C506101713DD246B92AD47D2A8A914891538670F8F38F32B4C 333: 39A87C5B4FF1DFBF7F00A6353F199F885EA95172C334B61335A46D9DE4 362: 93D2A1DB40B7CF7F39E6297D951CC35D459B911A591EF16511D9470C86 391: 1320B6559A138D1F4AE6B4FF8E493A3B9C5150B123FEB2FB84B5FDE60C 420: E4FBC5FA74E4E1B9CCDAA8F2A8D4CF574263 ]]>
Certificates With Different RDN Attributes
One RDN Attribute CommonName With EUI-48
  • Subject: a single RDN attribute, commonName, containing an EUI-48 value.
See .
One RDN Attribute CommonName With EUI-64
  • Subject: a single RDN attribute, commonName, containing an EUI-64 value.
See .
One RDN Attribute CommonName With Even Number Of Lowercase Hex Letters
  • Subject: a single RDN attribute, commonName, containing an even number of lowercase hexadecimal characters.
See .
One RDN Attribute CommonName With Other Text
  • Subject: a single RDN attribute, commonName, containing text other than an EUI-48 value, an EUI-64 value, or an even number of lowercase hexadecimal characters.
See .
Empty Subject
  • Subject: empty.
See .
Subject With RDN Attribute Business Category
  • Subject: includes the RDN attribute businessCategory.
See .
Subject With RDN Attribute Country
  • Subject: includes the RDN attribute countryName.
See .
Subject With RDN Attribute Directory Management Domain Name
  • Subject: includes the RDN attribute directoryManagementDomainName.
See .
Subject With RDN Attribute DN Qualifier
  • Subject: includes the RDN attribute dnQualifier.
See .
Subject With RDN Attribute Domain Component
  • Subject: includes the RDN attribute domainComponent.
See .
Subject With RDN Attribute Email Address
  • Subject: includes the RDN attribute emailAddress.
See .
Subject With RDN Attribute Generation Qualifier
  • Subject: includes the RDN attribute generationQualifier.
See .
Subject With RDN Attribute Given Name
  • Subject: includes the RDN attribute givenName.
See .
Subject With RDN Attribute Initials
  • Subject: includes the RDN attribute initials.
See .
Subject With RDN Attribute Jurisdiction Country
  • Subject: includes the RDN attribute jurisdictionCountryName.
See .
Subject With RDN Attribute Jurisdiction Locality
  • Subject: includes the RDN attribute jurisdictionLocalityName.
See .
Subject With RDN Attribute Jurisdiction State Or Province
  • Subject: includes the RDN attribute jurisdictionStateOrProvinceName.
See .
Subject With RDN Attribute Locality
  • Subject: includes the RDN attribute localityName.
See .
Subject With RDN Attribute Name
  • Subject: includes the RDN attribute name.
See .
Subject With RDN Attribute Organization
  • Subject: includes the RDN attribute organizationName.
See .
Subject With RDN Attribute Organizational Unit
  • Subject: includes the RDN attribute organizationalUnitName.
See .
Subject With RDN Attribute Organization Identifier
  • Subject: includes the RDN attribute organizationIdentifier.
See .
Subject With RDN Attribute Postal Code
  • Subject: includes the RDN attribute postalCode.
See .
Subject With RDN Attribute Pseudonym
  • Subject: includes the RDN attribute pseudonym.
See .
Subject With RDN Attribute Serial Number
  • Subject: includes the RDN attribute serialNumber.
See .
Subject With RDN Attribute State
  • Subject: includes the RDN attribute stateOrProvinceName.
See .
Subject With RDN Attribute Street
  • Subject: includes the RDN attribute street.
See .
Subject With RDN Attribute Surname
  • Subject: includes the RDN attribute surname.
See .
Subject With RDN Attribute Telephone Number
  • Subject: includes the RDN attribute telephoneNumber.
See .
Subject With RDN Attribute Title
  • Subject: includes the RDN attribute title.
See .
Subject With RDN Attribute Unstructured Address
  • Subject: includes the RDN attribute unstructuredAddress.
See .
Subject With RDN Attribute Unstructured Name
  • Subject: includes the RDN attribute unstructuredName.
See .
Subject With RDN Attribute User Id
  • Subject: includes the RDN attribute userId.
See .
Certificates With Different Extensions
Empty Extensions
  • Extensions: none
Not applicable to certificates; see for examples in certification requests.
One Extension: Non-Critical keyUsage
  • Extensions: a single non-critical keyUsage extension
See and .
One Extension: Critical keyUsage
  • Extensions: a single critical keyUsage extension
See and .
Authority Information Access See .
Authority Key Identifier
  • With only the keyIdentifier field present See .
  • With all fields present See .
ASIdentifiers And ASIdentifiers V2
  • ASIdentifiers with a non-empty array of ASIdOrRange
  • ASIdentifiers V2 set to null (inherit)
See .
Basic Constraints
  • CA = true and pathLenConstraint absent See .
  • CA = true and pathLenConstraint present See .
  • CA = false See .
Certificate Policies See .
CRL Distribution Points And Freshest CRL See .
Extended Key Usage
  • Integer-identified usages See .
  • ~oid-identified usages See .
  • Integer-identified and ~oid-identified usages See .
Inhibit anyPolicy See .
Issuer Alternative Name See .
IPAddrBlocks And IPAddrBlocks V2
  • IPAddrBlocks with SAFI = null and IP Address Choice = null
  • IPAddrBlocks V2 with SAFI = null and IP Address Choice = null See .
  • IPAddrBlocks with non-null SAFI and IntIPAddressChoice
  • IPAddrBlocks V2 with non-null SAFI, IntIPAddressChoice and IPAddressChoice See .
Name Constraints
  • Only PermittedSubTree See .
  • Only ExcludedSubTree See .
  • Both PermittedSubTree and ExcludedSubTree See .
OCSP No Check See .
Policy Constraints
  • Only RequireExplicitPolicy See .
  • Only InhibitPolicyMapping See .
  • Both RequireExplicitPolicy and InhibitPolicyMapping See .
Policy Mappings See .
Subject Alternative Name See .
Subject Information Access See .
Subject Key Identifier See .
TLS Features See .
Certificate With 8-Byte Integer Values This certificate uses 8-byte integer values in the following fields:
  • RDN attribute type
  • Extension ID
  • Extended key usage
  • Certificate policy identifier
No OID is associated with these integer values. The certificate therefore has no X.509 counterpart and cannot be encoded as a C509 type 3 certificate; only the C509 type 2 certificate is given.
Private Key See .
X.509 Certificate Not applicable.
C509 Type 3 Certificate Not applicable.
C509 Type 2 Certificate Plain hex (298 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 84 # [6]. subject=array[4], 2 attributes #---attribute[0]--- 18: 01 # [0]. type=1: commonName 19: 68 # [1]. value=char[8] 20: 38627974652D6964 # "8byte-id" #---attribute[1]--- 28: 1B 70FFFFFFFFFFFFFF # [2]. type=8142508126285856767: # unknown 37: 73 # [3]. value=char[19] 38: 6D7920382D6279746520617474726962 # "my 8-byte attrib" 54: 757465 # "ute" 57: 01 # [7]. subjectPublicKeyAlg=EC public key on # curve secp256r1 (1) 58: 58 41 # [8]. subject public key=EC point=byte[65] 60: 04F413596A87125995B4E0D8B7BEFBC4D6EDB11F61AF08AB32408D4FF9 89: F9078DDBAB3635AFD496D5656A22EFDC3D59C4482A99836BB358FBF4CA 118: 78D3930436C857 125: 8A # [9]. extensions=array[10] #---extension[0]--- 126: 02 # [0]. type=KeyUsage (2) 127: 01 # [1]. value=1: [digitalSignature] #---extension[1]--- 128: 06 # [2]. type=CertificatePolicies (6) 129: 84 # [3]. value=array[4] #---CertificatePolicy[0]--- 130: 1B 70FFFFFFFFFFFFF0 # [0]. PolicyIdentifier=unknown # (8142508126285856752) 139: 80 # [1]. PolicyQualifierInfos=array[0] #---CertificatePolicy[1]--- 140: 3B 70FFFFFFFFFFFFF0 # [2]. PolicyIdentifier=unknown # (-8142508126285856753) 149: 80 # [3]. PolicyQualifierInfos=array[0] #---extension[2]--- 150: 08 # [4]. type=ExtendedKeyUsage (8) 151: 82 # [5]. value=array[2] 152: 1B 70FFFFFFFFFFFFF2 # unknown (8142508126285856754) 161: 3B 70FFFFFFFFFFFFF2 # unknown (-8142508126285856755) #---extension[3]--- 170: 3B 70FFFFFFFFFFFFFD # [6]. type=unknown, critical # (-8142508126285856766) 179: 73 # [7]. value=char[19] 180: 6D7920637269746963616C206578616D # "my critical exam" 196: 706C65 # "ple" #---extension[4]--- 199: 1B 70FFFFFFFFFFFFFF # [8]. type=unknown # (8142508126285856767) 208: 77 # [9]. value=char[23] 209: 6D79206E6F6E2D637269746963616C20 # "my non-critical " 225: 6578616D706C65 # "example" 232: 58 40 # [10]. signature value=byte[64] 234: 8A25E8AABBA4B19B8E0D1596A476C2C42F5068F5F3457606806E2F284A 263: 22E6E7E819761044D562F4491A8E3DEB5FD227E32E0FDA02467E39F4A8 292: 4C694F079A4F ]]>
X.509 Certificate With Unconvertible RDN Attributes And Extensions
  • Common Name: text encoded in a string type other than PrintableString or UTF8String.
  • Subject Public Key Algorithm: an EC public key with an unknown curve OID in the parameters field.
  • ASIdentifiers: includes the rdi field.
  • Name Constraints: includes a DirectoryName option encoded as IA5String.
This certificate only demonstrates the encoding of the features listed above. It is self-signed, but the rdi field of its ASIdentifiers extension is set to inherit. A self-signed certificate has no issuer from which resources can be inherited, so validation of this certificate according to fails.
Private Key See .
X.509 Certificate PEM content (DER encoding: 387 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (257 bytes): Annotated hex: 6: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 11: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 16: 82 # [6]. subject=array[2], 1 attribute #---attribute[0]--- 17: 43 # [0]. type=byte[3]: 18: 550403 # oid: 2.5.4.3 (commonName) 21: 58 19 # [1]. value=byte[25] 23: 1617416E20494135537472696E6720436F6D6D6F6E4E616D65 48: 82 # [7]. subjectPublicKeyAlg=array[2] 49: 47 # [0]. algorithm=byte[7]: 50: 2A8648CE3D0201 # oid: 1.2.840.10045.2.1 57: 4B # [1]. parameters=byte[11] 58: 06092B0601040181FD5905 69: 58 41 # [8]. subject public key=byte[65] 71: 04F413596A87125995B4E0D8B7BEFBC4D6EDB11F61AF08AB32408D4FF9 100: F9078DDBAB3635AFD496D5656A22EFDC3D59C4482A99836BB358FBF4CA 129: 78D3930436C857 136: 84 # [9]. extensions=array[4] #---extension[0]--- 137: 48 # [0]. type=byte[8]: 138: 2B06010505070108 # oid: 1.3.6.1.5.5.7.1.8 (ASIdentifiers) 146: 46 # [1]. value=byte[6] 147: 3004A1020500 #---extension[1]--- 153: 18 1A # [2]. type=NameConstraints (26) 155: 82 # [3]. value=array[2] 156: 82 # [0]. permittedSubtrees=array[2] #---GeneralName[0]--- 157: 04 # [0]. GeneralNameType=4: directoryName 158: 82 # [1]. GeneralNameValue=array[2], 1 # attribute #---attribute[0]--- 159: 43 # [0]. type=byte[3]: 160: 550403 # oid: 2.5.4.3 (commonName) 163: 58 19 # [1]. value=byte[25] 165: 1617416E20494135537472696E6720436F6D6D6F6E4E616D65 190: F6 # [1]. excludedSubtrees= 191: 58 40 # [10]. signature value=byte[64] 193: 8A25E8AABBA4B19B8E0D1596A476C2C42F5068F5F3457606806E2F284A 222: 22E6E74F787D4E04FE4B62DEDDA880077DC9CB2A5D7A1D8ED62309CD46 251: 7E61854DC30A ]]>
Certification Requests With Different Signature Algorithms
ECDSA With SHA-256
  • Signature algorithm: ECDSA with SHA-256
  • CR attributes: one extensionRequest attribute.
Private Key See .
X.509 Certification Request PEM content (DER encoding: 253 bytes): Textual Representation:
C509 Type 3 Certification Request
  • C509 type 3 certification request converted from the X.509 certification request in .
Plain hex (164 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certification request in . The only differences are the certification request type and the signature value.
C509 Type 2 Certification Request Plain hex (164 bytes): Annotated hex:
ECDSA With SHA-384
  • Signature algorithm: ECDSA with SHA-384
  • CR attributes: one challengePassword attribute with a PrintableString value.
Private Key See .
X.509 Certification Request PEM content (DER encoding: 300 bytes): Textual Representation:
C509 Type 3 Certification Request
  • C509 type 3 certification request converted from the X.509 certification request in .
Plain hex (228 bytes): Annotated hex:
C509 Type 2 Certification Request A PrintableString challengePassword value is not supported in a type 2 certification request.
PoP With SHA-256 And HMAC-SHA256
  • Signature algorithm: PoP with SHA-256 and HMAC-SHA256
  • Signature value: only the hashValue field is present.
  • CR attributes: one challengePassword attribute with a UTF8String value.
Private Key
X.509 Certification Request
  • The peer private key and certificate are given in and .
PEM content (DER encoding: 206 bytes): Textual Representation:
C509 Type 3 Certification Request
  • C509 type 3 certification request converted from the X.509 certification request in .
Plain hex (132 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certification request in . The only differences are the certification request type and the signature value.
C509 Type 2 Certification Request
  • The peer private key and certificate are given in and .
Plain hex (132 bytes): Annotated hex:
PoP With SHA-384 And HMAC-SHA384
  • Signature algorithm: PoP with SHA-384 and HMAC-SHA384
  • Signature value: all fields are present.
  • CR attributes: none.
Private Key
X.509 Certification Request
  • The peer private key and certificate are given in and .
PEM content (DER encoding: 261 bytes): Textual Representation:
C509 Type 3 Certification Request
  • C509 type 3 certification request converted from the X.509 certification request in .
Plain hex (190 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certification request in . The only differences are the certification request type and the signature value.
C509 Type 2 Certification Request
  • The peer private key and certificate are given in and .
Plain hex (190 bytes): Annotated hex:
PoP With SHA-512 And HMAC-SHA512
  • Signature algorithm: PoP with SHA-512 and HMAC-SHA512
  • Signature value: only the hashValue field is present.
  • CR attributes: none.
Private Key
X.509 Certification Request
  • The peer private key and certificate are given in and .
PEM content (DER encoding: 278 bytes): Textual Representation:
C509 Type 3 Certification Request
  • C509 type 3 certification request converted from the X.509 certification request in .
Plain hex (219 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certification request in . The only differences are the certification request type and the signature value.
C509 Type 2 Certification Request
  • The peer private key and certificate are given in and .
Plain hex (219 bytes): Annotated hex:
Unsigned PoP With X25519 Key
  • Signature algorithm: Unsigned
  • CR attributes: a privateKeyPossessionStatement attribute without the cert field.
Private Key See .
X.509 Certification Request PEM content (DER encoding: 135 bytes): Textual Representation: ]]>
C509 Type 3 Certification Request
  • C509 type 3 certification request converted from the X.509 certification request in .
Plain hex (64 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certification request in . The only differences are the certification request type and the signature value.
C509 Type 2 Certification Request Plain hex (64 bytes): Annotated hex: 63: 40 # [6]. signature value=byte[0] ]]>
Unsigned PoP With X25519 Key And Cert
  • Signature algorithm: Unsigned
  • CR attributes: a privateKeyPossessionStatement attribute with the cert field.
Private Key See .
X.509 Certification Request PEM content (DER encoding: 433 bytes): Textual Representation: ]]>
C509 Type 3 Certification Request
  • C509 type 3 certification request converted from the X.509 certification request in .
Plain hex (230 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certification request in . The only differences are the certification request type and the signature value.
C509 Type 2 Certification Request Plain hex (230 bytes): Annotated hex:
Certification Requests With Different CR Attributes
With Empty CR Attributes
  • CR attributes: none.
See and .
With challengePassword Attribute
  • CR attributes: one challengePassword attribute of type UTF8String.
See .
  • CR attributes: one challengePassword attribute of type PrintableString.
See .
With extensionRequest Attribute
  • CR attributes: one extensionRequest attribute.
See .
With privateKeyPossessionStatement Attribute
  • CR attributes: one privateKeyPossessionStatement attribute without the cert field.
See .
  • CR attributes: one privateKeyPossessionStatement attribute with the cert field.
See .
Certification Request With 8-Byte Identifiers This certification request uses an 8-byte integer value as CR attribute type. No OID is associated with this integer value. The certification request therefore has no X.509 counterpart and cannot be encoded as a C509 type 3 certification request; only the C509 type 2 certification request is given.
Private Key See .
X.509 Certification Request Not applicable.
C509 Type 3 Certification Request Not applicable.
C509 Type 2 Certification Request Plain hex (174 bytes): Annotated hex:
Certification Request Templates
All Fields Set to "undefined" Where Possible
  • c509CertificationRequestType: undefined
  • subjectSignatureAlgorithm: undefined
  • subject: undefined
  • subjectPublicKeyAlgorithm: undefined
  • subjectPublicKey: undefined
  • extensionsRequest: undefined
Plain hex (8 bytes): Annotated hex: 3: F7 # [2]. subjectSignatureAlgorithm= 4: F7 # [3]. subject= 5: F7 # [4]. subjectPublicKeyAlgorithm= 6: F7 # [5]. subjectPublicKey= 7: F7 # [6]. extensionsRequest= ]]>
With One Element in Each Field
  • c509CertificationRequestType: one element
  • subjectSignatureAlgorithm: one element
  • subject: one element
  • subjectPublicKeyAlgorithm: one element
  • extensionsRequest: one element
Plain hex (18 bytes): Annotated hex: 11: 81 # [4]. subjectPublicKeyAlgorithm: array[1] 12: 01 # [0]. EC public key on curve secp256r1 (1) 13: F7 # [5]. subjectPublicKey= 14: 83 # [6]. extensionsRequest=array[3] #---extension[0]--- 15: 03 # [0]. type=SubjectAlternativeName (3) 16: F4 # [1]. required 17: F7 # [2]. value= ]]>
Complex Template
  • c509CertificationRequestType: multiple values
  • subjectSignatureAlgorithm: all choices
  • subjectPublicKeyAlgorithm: all choices
  • subject
    • choice (int, Defined)
    • choice (int, undefined)
    • choice (~oid, Defined)
    • choice (~oid, undefined)
  • extensionsRequest
    • choice (int, Defined)
    • choice (int, undefined)
    • choice (~oid, Defined)
    • choice (~oid, undefined)
Plain hex (153 bytes): Annotated hex: #---attribute[1]--- 36: 04 # [4]. type=4: country 37: 01 # [5]. minOccurs=1 38: 01 # [6]. maxOccurs=1 39: 62 # [7]. value=char[2] 40: 4445 # "DE" #---attribute[2]--- 42: 49 # [8]. type=byte[9]: 43: 2B0601040181FD590B # oid: 1.3.6.1.4.1.32473.11 52: 01 # [9]. minOccurs=1 53: 01 # [10]. maxOccurs=1 54: F7 # [11]. value= #---attribute[3]--- 55: 49 # [12]. type=byte[9]: 56: 2B0601040181FD590C # oid: 1.3.6.1.4.1.32473.12 65: 01 # [13]. minOccurs=1 66: 01 # [14]. maxOccurs=1 67: 4D # [15]. value=byte[13] 68: 0C0B636F6E73742D76616C7565 81: 83 # [4]. subjectPublicKeyAlgorithm: array[3] 82: 01 # [0]. EC public key on curve secp256r1 (1) 83: 49 # [1]. byte[9]: 84: 2B0601040181FD5909 # oid: 1.3.6.1.4.1.32473.9 93: 82 # [2]. array[2] 94: 49 # [0]. algorithm=byte[9]: 95: 2B0601040181FD590A # oid: 1.3.6.1.4.1.32473.10 104: 42 # [1]. parameters=byte[2] 105: 0500 107: F7 # [5]. subjectPublicKey= 108: 8C # [6]. extensionsRequest=array[12] #---extension[0]--- 109: 08 # [0]. type=ExtendedKeyUsage (8) 110: F4 # [1]. required 111: F7 # [2]. value= #---extension[1]--- 112: 02 # [3]. type=KeyUsage (2) 113: F5 # [4]. optional 114: 18 60 # [5]. value=96: [keyCertSign, cRLSign] #---extension[2]--- 116: 49 # [6]. type=byte[9]: 117: 2B0601040181FD590D # oid: 1.3.6.1.4.1.32473.13 126: F4 # [7]. required 127: F7 # [8]. value= #---extension[3]--- 128: 49 # [9]. type=byte[9]: 129: 2B0601040181FD590E # oid: 1.3.6.1.4.1.32473.14 138: F4 # [10]. required 139: 4D # [11]. value=byte[13] 140: 0C0B636F6E73742D76616C7565 ]]>
With 8-Byte Integer Values This template uses 8-byte integer values in the following fields:
  • RDN attribute type
  • Extension ID
Plain hex (41 bytes): Annotated hex: #---attribute[1]--- 11: 1B 70FFFFFFFFFFFFFF # [4]. type=8142508126285856767: unknown 20: 01 # [5]. minOccurs=1 21: 01 # [6]. maxOccurs=1 22: F7 # [7]. value= 23: 81 # [4]. subjectPublicKeyAlgorithm: array[1] 24: 01 # [0]. EC public key on curve secp256r1 (1) 25: F7 # [5]. subjectPublicKey= 26: 86 # [6]. extensionsRequest=array[6] #---extension[0]--- 27: 03 # [0]. type=SubjectAlternativeName (3) 28: F4 # [1]. required 29: F7 # [2]. value= #---extension[1]--- 30: 1B 70FFFFFFFFFFFFFF # [3]. type=unknown # (8142508126285856767) 39: F4 # [4]. required 40: F7 # [5]. value= ]]>
Security Considerations The private keys shown in this document are for example purposes only. They are not secret and MUST NOT be used in deployments. The examples use 1024-bit or 1536-bit RSA keys and reuse key pairs to keep the examples compact. In deployments, key pairs are expected to be generated uniquely and not reused. The examples also use RSA PKCS#1 v1.5 signatures, and SHA-1 with RSA and ECDSA, to cover all signature algorithms defined in . These choices do not reflect current state-of-the-art security recommendations; at the time of writing, RSA keys of at least 3072 bits, stronger hash functions, and RSA-PSS are required for adequate security.
Privacy Considerations There are no privacy considerations.
IANA Considerations There are no IANA considerations.
References Normative References Key words for use in RFCs to Indicate Requirement Levels In many standards track documents several words are used to signify the requirements in the specification. These words are often capitalized. This document defines these words as they should be interpreted in IETF documents. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements. Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words RFC 2119 specifies common key words that may be used in protocol specifications. This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the defined special meanings. Concise Binary Object Representation (CBOR) The Concise Binary Object Representation (CBOR) is a data format whose design goals include the possibility of extremely small code size, fairly small message size, and extensibility without the need for version negotiation. These design goals make it different from earlier binary serializations such as ASN.1 and MessagePack. This document obsoletes RFC 7049, providing editorial improvements, new details, and errata fixes while keeping full compatibility with the interchange format of RFC 7049. It does not create a new version of the format. Concise Binary Object Representation (CBOR) Tags for Object Identifiers The Concise Binary Object Representation (CBOR), defined in RFC 8949, is a data format whose design goals include the possibility of extremely small code size, fairly small message size, and extensibility without the need for version negotiation. This document defines CBOR tags for object identifiers (OIDs) and is the reference document for the IANA registration of the CBOR tags so defined. CBOR Encoded X.509 Certificates (C509 Certificates) Ericsson AB Ericsson AB University of Glasgow RISE AB IN Groupe NIO Inc. This document specifies a CBOR encoding of X.509 certificates. The resulting certificates are called C509 certificates. The CBOR encoding supports a large subset of RFC 5280 and common certificate profiles, and it is extensible. Two types of C509 certificates are defined. One type is an invertible CBOR re-encoding of DER-encoded X.509 certificates with the signature field copied from the DER encoding. The other type is identical except that the signature is computed over the CBOR encoding instead of the DER encoding, thereby avoiding the use of ASN.1. Both types of certificates have the same semantics as X.509 while providing comparable size reduction. This document also specifies CBOR-encoded data structures for certification requests and certification request templates, new COSE headers, as well as a TLS certificate type and a file format for C509. This document updates RFC 6698 by extending the TLSA selectors registry to include C509 certificates. Informative References X.509 Extensions for IP Addresses and AS Identifiers This document defines two X.509 v3 certificate extensions. The first binds a list of IP address blocks, or prefixes, to the subject of a certificate. The second binds a list of autonomous system identifiers to the subject of a certificate. These extensions may be used to convey the authorization of the subject to use the IP addresses and autonomous system identifiers contained in the extensions. [STANDARDS-TRACK]
Acknowledgments The authors thank Marco Tiloca for reviewing and commenting on intermediate versions of the draft.
Change log
  • Note to RFC Editor: Please remove this section prior to publication of the final version of this document.
Since draft-ietf-cose-c509-test-vectors-02
  • Align with draft-ietf-cose-cbor-encoded-cert-21
    • Remove extension Subject Directory Attributes
  • Add examples with values in the range [2^32, 2^63 - 1] and [-2^32, -2^63]
  • Replace abc.com with abc.example.com
  • Add Section Overview
  • Add section "Location of Test Vectors"
  • Improve annotated hex
  • Merge separate leading line with only "8B" / "87" with other lines in the hex block
  • Show times in the textual representations in UTC
  • Improve annotation of times and OIDs in annotated hex
  • Change AS identifiers from 2, 3-6 to 2, 5-8 to use the canonical form required by RFC 3779
  • Move IPAddrBlocks (V2) and ASIdentifiers (V2) extensions from self-signed certificates to certificates issued by the CA
  • Add notes on certificates that fail RFC 3779 validation
  • Add a certification request and a certification request template with 8-byte integer values
Since draft-ietf-cose-c509-test-vectors-01
  • Align with draft-ietf-cose-cbor-encoded-cert-20
  • Add the leading byte for CBOR array
    • 0x8B for C509Certificate
    • 0x87 for C509CertificationRequest
    • 0x87 for C509CertificationRequestTemplate
  • Better indentation for extensions, RDN attributes, CR attributes, certificate policies, etc.
  • Fixed examples
    • Section 3.6: replace the empty subject of the self-signed certificate with non-empty one.
    • Section 3.12 and Section 3.13: replace empty signature value in non-selfsigned certificate with non-empty one.