User Tools

Site Tools


setup:pki

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
setup:pki [2021/07/29 16:27] – [Intermediate CA] rootsetup:pki [2021/07/29 16:33] (current) – [Server certificate] root
Line 5: Line 5:
  
 <code> <code>
-        X509v3 extensions: +X509v3 extensions: 
-            X509v3 Key Usage: critical + X509v3 Key Usage: critical 
-                Certificate Sign, CRL Sign + Certificate Sign, CRL Sign 
-            X509v3 Basic Constraints: critical + X509v3 Basic Constraints: critical 
-                CA:TRUE + CA:TRUE 
-            X509v3 Subject Key Identifier: + X509v3 Subject Key Identifier: 
-                xx:xx:xx:xx:xx:xx:xx:xx:xx:...:xx:xx:xx + xx:xx:xx:xx:xx:xx:xx:xx:xx:...:xx:xx:xx
-            +
 </code> </code>
 ==== Intermediate CA ==== ==== Intermediate CA ====
Line 43: Line 42:
  
 ==== Server certificate ==== ==== Server certificate ====
 +<code>
 +Serial Number:
 + xx:xx:xx:xx:xx:xx:...:xx:xx
 +X509v3 extensions:
 + X509v3 Key Usage: critical
 + Digital Signature, Key Encipherment
 + Authority Information Access:
 + CA Issuers - URI:http://www.example.com/cacert/cert-inter.crt
 + OCSP - URI:http://ocsp.example.com/cert-inter
  
 + X509v3 Certificate Policies:
 + Policy: 1.3.6.1.4.1.4146.1.1
 +   CPS: https://www.example.com/repository/
 + Policy: 2.23.140.1.1
 +
 + X509v3 Basic Constraints:
 + CA:FALSE
 + X509v3 CRL Distribution Points:
 +
 + Full Name:
 +   URI:http://crl.example.com/cert-inter.crl
 +
 + X509v3 Subject Alternative Name:
 +     ........
 + X509v3 Extended Key Usage:
 + TLS Web Server Authentication, TLS Web Client Authentication
 + X509v3 Authority Key Identifier:
 + keyid:xx:xx:xx:xx:xx:xx:...:xx:xx
 +
 + X509v3 Subject Key Identifier:
 + xx:xx:xx:xx:xx:xx:...:xx:xx
 +</code>
 ==== OCSP certificate ==== ==== OCSP certificate ====
  
setup/pki.1627568850.txt.gz · Last modified: 2021/07/29 16:27 by root

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki