Skip to content

Retrieving Certificate

Jump to bottom
Endi S. Dewata edited this page Jan 20, 2022 · 6 revisions

Displaying Certificate Info

$ pki ca-cert-show 0x7
-----------------
Certificate "0x7"
-----------------
  Serial Number: 0x7
  Issuer: CN=CA Signing Certificate,O=EXAMPLE
  Subject: UID=testuser
  Status: VALID
  Not Before: Mon Apr 04 17:01:12 CEST 2016
  Not After: Sat Oct 01 17:01:12 CEST 2016

Displaying Certificate Details

$ pki ca-cert-show 0x7 --pretty
-----------------
Certificate "0x7"
-----------------
  Serial Number: 0x7
  Issuer: CN=CA Signing Certificate,O=EXAMPLE
  Subject: UID=testuser
  Status: VALID
  Not Before: Mon Apr 04 17:01:12 CEST 2016
  Not After: Sat Oct 01 17:01:12 CEST 2016

    Certificate:
        Data:
            Version:  v3
            Serial Number: 0x7
            Signature Algorithm: SHA256withRSA - 1.2.840.113549.1.1.11
            Issuer: CN=CA Signing Certificate,O=EXAMPLE
            Validity:
                Not Before: Monday, April 4, 2016 5:01:12 PM CEST Europe/Prague
                Not  After: Saturday, October 1, 2016 5:01:12 PM CEST Europe/Prague
            Subject: UID=testuser
            Subject Public Key Info:
                Algorithm: RSA - 1.2.840.113549.1.1.1
                Public Key:
                    Exponent: 65537
                    Public Key Modulus: (1024 bits) :
                        B8:5F:68:0A:BD:45:5A:4B:A8:41:40:5D:B3:C8:98:DE:
                        F2:33:EF:C8:8F:67:13:E9:0B:9A:57:FB:7C:61:A8:48:
                        16:6C:99:29:4C:A4:DD:F2:FD:32:FD:68:61:E3:AD:97:
                        C4:69:52:06:95:B5:66:2C:00:39:1F:D1:3E:43:FE:1F:
                        91:BB:87:73:47:D7:4D:94:D6:CE:62:58:63:0A:65:26:
                        F9:75:E5:99:72:32:6D:2E:D7:21:D5:B9:F4:9E:D8:E1:
                        A6:66:6E:49:A0:11:FF:66:FF:C3:D9:47:66:08:D4:75:
                        94:6C:E6:5D:B2:FF:AC:59:99:5C:8D:6A:C9:C1:3B:D7
            Extensions:
                Identifier: Authority Key Identifier - 2.5.29.35
                    Critical: no
                    Key Identifier:
                        24:75:FC:22:D6:EC:A9:9A:BA:37:EE:D9:A4:EC:A8:1C:
                        68:C4:E7:E6
                Identifier: Authority Info Access: - 1.3.6.1.5.5.7.1.1
                    Critical: no
                    Access Description:
                        Method #0: ocsp
                        Location #0: URIName: http://pki.example.com:8080/ca/ocsp
                Identifier: Key Usage: - 2.5.29.15
                    Critical: yes
                    Key Usage:
                        Digital Signature
                        Non Repudiation
                        Key Encipherment
                Identifier: Extended Key Usage: - 2.5.29.37
                    Critical: no
                    Extended Key Usage:
                        1.3.6.1.5.5.7.3.2
                        1.3.6.1.5.5.7.3.4
        Signature:
            Algorithm: SHA256withRSA - 1.2.840.113549.1.1.11
            Signature:
                20:42:71:2E:5E:11:FE:4F:7D:94:E4:0B:DE:3C:57:1A:
                31:BA:6B:67:DD:62:45:4C:55:94:60:98:9E:D8:BE:59:
                22:8C:2C:15:47:9B:11:F8:35:A5:E3:44:34:4C:2C:CC:
                CD:53:69:BF:2C:C4:D4:2A:B1:51:EC:3B:AA:86:9E:ED:
                EB:4D:EB:47:B9:AD:80:81:80:1D:C8:49:3D:5C:4B:D8:
                1F:83:06:33:BF:59:8C:F5:E4:04:15:22:E8:0A:33:46:
                7D:63:95:4D:B2:E5:7C:34:3B:E1:8C:F7:3D:A2:97:2D:
                1D:4C:41:42:58:66:77:62:51:93:49:AF:41:8B:F6:75:
                91:FC:B0:67:41:B6:50:24:2D:16:B7:9D:E4:4F:F7:A6:
                1E:D6:4F:0D:78:B9:DC:C4:62:C9:97:7F:EA:E5:40:22:
                6E:86:A7:99:50:2F:35:92:F0:E2:32:6D:86:24:E5:26:
                64:26:87:67:81:BB:16:93:FE:83:48:1A:97:85:B9:EB:
                44:F9:CA:80:83:9B:AE:DD:74:5E:D7:1E:F2:C8:FF:A2:
                65:1E:F9:B7:C6:00:55:1C:9C:4F:86:85:B8:38:C5:FD:
                EC:76:AD:EC:20:70:54:FB:40:33:3E:AB:23:80:D5:11:
                53:4D:EF:57:1D:1E:D6:9F:83:AF:77:45:54:6E:2E:08
        FingerPrint
            MD2:
                44:37:24:D7:00:9C:A9:8B:9D:30:0A:FA:0F:3C:9D:E1
            MD5:
                F1:02:80:A1:8A:F5:40:03:8E:21:F4:DC:4C:B2:A4:47
            SHA-1:
                02:47:85:67:AF:43:17:68:D7:A8:BB:00:06:35:51:9D:
                EC:FB:15:04
            SHA-256:
                A1:FD:BF:D0:A7:64:8A:3B:C2:52:AC:39:2B:48:66:2D:
                02:41:24:0E:DC:B6:11:BD:6B:58:6A:DA:C0:5D:3C:1B
            SHA-512:
                67:C6:4B:E8:F4:7B:8B:A1:5C:52:CE:34:A7:CE:42:BE:
                E3:87:85:BD:A7:E9:06:2D:55:94:4F:15:ED:67:66:AF:
                6F:57:B0:34:2C:BC:44:3A:95:41:86:38:E4:D5:A5:E0:
                83:DD:77:EA:1D:CD:6C:96:A0:E5:32:25:0E:C8:D9:10

Exporting Certificate

To export a certificate:

$ pki ca-cert-export 0x7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Alternatively:

$ pki ca-cert-show 0x7 --encoded
-----------------
Certificate "0x7"
-----------------
  Serial Number: 0x7
  Issuer: CN=CA Signing Certificate,O=EXAMPLE
  Subject: UID=testuser
  Status: VALID
  Not Before: Mon Apr 04 17:01:12 CEST 2016
  Not After: Sat Oct 01 17:01:12 CEST 2016

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Importing Certificate into Client NSS Database

$ pki client-cert-import testuser --serial 0x7
-------------------------------
Imported certificate "testuser"
-------------------------------
$ pki client-cert-find
----------------------
1 certificate(s) found
----------------------
  Serial Number: 0x7
  Nickname: testuser
  Subject DN: UID=testuser
  Issuer DN: CN=CA Signing Certificate,O=EXAMPLE
----------------------------
Number of entries returned 1
----------------------------
Tip
 To find a page in the Wiki, enter the keywords in search field, press Enter, then click Wikis.
Clone this wiki locally