]> Test Vectors for CBOR-Encoded X.509 (C509) Certificates NIO Inc.
lijun.liao@nio.io
Ericsson AB
goran.selander@ericsson.com
Ericsson AB
john.mattsson@ericsson.com
Security COSE Working Group Internet-Draft This document contains examples of CBOR-encoded X.509 (C509) certificates, certification requests, and certification request templates.
Introduction This document contains examples of CBOR-encoded X.509 (C509) certificates, certification requests, and certification request templates encoded in CBOR according to the C509 specification . It complements the C509 specification by providing an extensive set of readable examples that illustrate the encodings of certificate and certification request fields, and that can be used to test interoperability between C509 implementations. The examples are shown in multiple encodings and formats: X.509 certificates and certification requests in PEM format, and C509 certificates and certification requests in plain hexadecimal and annotated forms. The examples include two types of C509 certificates, distinguished by the value of the c509CertificateType field (see ):
  • c509CertificateType = 03 (called type 3 in this document) is a reversible CBOR encoding of an X.509 certificate, in which the issuerSignatureValue field of the C509 certificate contains the signatureValue field of the X.509 certificate, that is, the digital signature computed over the ASN.1 DER encoding.
  • c509CertificateType = 02 (called type 2 in this document) differs from type 3 only in this value and in that the issuerSignatureValue field of the C509 certificate contains the signature over the TBSCertificate of the C509 certificate, that is, the digital signature computed over the CBOR encoding.
The examples also include two analogous types of C509 certification requests, also called type 2 and type 3 in this document, distinguished by the value of the c509CertificationRequestType field. Private keys are also provided to enable the creation of signatures and the verification of ECDH proof of possession. The keys printed in these examples are not secret and MUST NOT be used for any purpose other than testing. The examples are structured as follows:
  • contains a CA certificate used in later sections.
  • contains certificates with different subject public key types, including RSA, Weierstrass EC, Edwards EC, and Montgomery EC keys.
  • contains certificates with different signature and proof-of-possession algorithms and points to the sections where those algorithms are encoded.
  • contains certificates with different RDN attributes and points to the sections where those attributes are encoded.
  • contains certificates with different extensions and points to the sections where those extensions are encoded.
  • provides examples of certificates with RDN attributes or extensions for which no dedicated CBOR encoding has been defined and for which generic constructs such as CBOR OID are used.
  • provides examples of certification requests with different signature or proof-of-possession algorithms.
  • provides examples of certification requests with different CR attributes.
  • provides examples of certification request templates.
Terminology The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 when, and only when, they appear in all capitals, as shown here. Readers are expected to be familiar with C509 certificates .
Target version of draft-ietf-cose-cbor-encoded-cert
  • Note to RFC Editor: Please remove this section prior to publication of the final version of this document.
The test vectors in this document align with draft-ietf-cose-cbor-encoded-cert-20.
CA Certificate
  • The CA uses an Ed25519 public key because the resulting signature is compact and deterministic.
  • Signature algorithm: unsigned
  • Key: Ed25519
Private Key
X.509 Certificate PEM content (245 bytes): Textual Representation: ]]>
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
  • Compared to the C509 type 2 certificate, the only differences are the certificate type, the signature value, and the public key identifier.
Plain hex (97 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (97 bytes): Annotated hex: 6: 1A 67748580 # [4]. notBefore=1735689600: # 2025-01-01T00:00:00Z 11: 1A 6B36EC7F # [5]. notAfter=1798761599: # 2026-12-31T23:59:59Z 16: 67 # [6]. subject=char[7] 17: 74657374206361 # "test ca" 24: 0C # [7]. subjectPublicKeyAlg=12: Ed25519 25: 58 20 # [8]. subject public key=EC point=byte[32] 27: 5A9414AC56D1B6AF0C966FC53B9476B5C95D0EEAAEF764D9EFE86DB732 56: 0C36E1 59: 88 # [9]. extensions=array[8] #---extension[0]--- 60: 01 # type=1: SubjectKeyIdentifier 61: 54 # value=byte[20] 62: 0369D71F96FE1258A746AC2B208E756E6D1D3ED9 #---extension[1]--- 82: 21 # type=-2: KeyUsage, critical 83: 18 60 # value=96: [keyCertSign, cRLSign] #---extension[2]--- 85: 03 # type=3: SubjectAlternativeName 86: 67 # value: DNS, value=char[7] 87: 6162632E636F6D # "abc.com" #---extension[3]--- 94: 23 # type=-4: BasicConstraints, critical 95: 20 # value=-1: CA: true, pathLenConstraint: # unlimited 96: 40 # [10]. signature value=byte[0] ]]>
Certificates With Different Subject Public Keys
RSA Public Key With Public Exponent 65537
  • Self-signed certificate
  • RSA public key with public exponent 65537 (= 2^16 + 1) and a 1024-bit modulus.
  • Signature algorithm: sha256WithRSAEncryption
  • NotAfter: null
  • Subject: a commonName containing an EUI-48 value
  • Extensions: a single non-critical keyUsage extension
Private Key
X.509 Certificate PEM content (464 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
  • Compared to the C509 type 2 certificate, the only differences are the certificate type, the signature value, and the public key identifier.
Plain hex (284 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (284 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: F6 # [5]. notAfter=: 9999-12-31T23:59:59Z 13: D8 30 # [6]. subject=tag(48) 15: 46 # byte[6] 16: 1234567890AB 22: 00 # [7]. subjectPublicKeyAlg=0: RSA 23: 58 80 # [8]. subject public key=modulus=byte[128] 25: B8092F6F04726A921CFAB2D313AE9D2F01C7CE465FAB7DA62C7A5C73FA 54: CE5FFBA2F1DD80A29ADC43399CFCA22279B89A264810E5B926BB5E0D3F 83: 727A763E16013F89F8FEAC59D0FBDD5E8B0C52827E5490F13B84C3634E 112: 89C6D1731AE5F1A60F88ED118D080E1AB2CAA532D06C2F7D2A0874DEE4 141: E6B6E57283F6478DAF4253DB 153: 01 # [9]. extensions=1, KeyUsage: # [digitalSignature] 154: 58 80 # [10]. signature value=byte[128] 156: 371A7322CDD9DECB1F3B4851A18A47B461A479C29DCE7397290C79DB95 185: 643A5C7FE2B1F02DB6AF5F0BCA9602D837F7EB3D4AA28738CBCAD38504 214: 3304E648022A1E9FE0FD19687839AC3EC7C7B6F6E5F85B4416BA085D5C 243: 9E367A0B892829F2F3E4A31D3FDA0E58EA701A72CB3F1B4A06E3DF44F4 272: 492FCFBD5C5F71F03340D7CA ]]>
RSA Public Key With Public Exponent 4294967297
  • Self-signed certificate
  • RSA public key with public exponent 4294967297 (= 2^32 + 1) and a 1024-bit modulus
  • Signature algorithm: sha384WithRSAEncryption
  • Subject: a commonName containing an EUI-64 value
  • Extensions: a single critical keyUsage extension
Private Key
X.509 Certificate PEM content (467 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (298 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (298 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: D8 30 # [6]. subject=tag(48) 20: 48 # byte[8] 21: 1234567890ABCDEF 29: 00 # [7]. subjectPublicKeyAlg=0: RSA 30: 82 # [8]. subject public key=array[2] 31: 58 80 # modulus=byte[128] 33: B8092F6F04726A921CFAB2D313AE9D2F01C7CE465FAB7DA62C7A5C73 61: FACE5FFBA2F1DD80A29ADC43399CFCA22279B89A264810E5B926BB5E 89: 0D3F727A763E16013F89F8FEAC59D0FBDD5E8B0C52827E5490F13B84 117: C3634E89C6D1731AE5F1A60F88ED118D080E1AB2CAA532D06C2F7D2A 145: 0874DEE4E6B6E57283F6478DAF4253DB 161: 45 # exponent=byte[5] 162: 0100000001 167: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 168: 58 80 # [10]. signature value=byte[128] 170: 507EE326549994969B3FAD4309A2704F424E435A24C505603F51104F1E 199: 8DDB153D784A9E34E88BC74F67143970B0FCBD2119AC89E87ABF9C2818 228: FFBF5C6993F87F7A5B640BB7E0FDBCE5F2136377F70C279D76866D725E 257: 5868F4FE56F031E80ACBEDE58A6E1AD1CD65A0ADB303C555F408651D5E 286: 7F752805EA4B79EF36105344 ]]>
Weierstrass EC Public Key On Curve secp256r1
  • Self-signed certificate
  • EC public key on the curve secp256r1
  • Signature algorithm: ecdsa-with-sha256
  • Subject: a commonName containing an even number of lowercase hexadecimal characters
  • Extensions
    • Basic Constraints: CA, without pathLenConstraint
    • Extended Key Usage: only an integer-identified usage
    • Subject Key Identifier
Private Key
X.509 Certificate PEM content (383 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (190 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the public key identifier.
C509 Type 2 Certificate Plain hex (190 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 48 # [6]. subject=byte[8] 18: 1234567890ABCDEF 26: 01 # [7]. subjectPublicKeyAlg=1: EC public key on # curve secp256r1 27: 58 41 # [8]. subject public key=EC point=byte[65] 29: 04F413596A87125995B4E0D8B7BEFBC4D6EDB11F61AF08AB32408D4FF9 58: F9078DDBAB3635AFD496D5656A22EFDC3D59C4482A99836BB358FBF4CA 87: 78D3930436C857 94: 88 # [9]. extensions=array[8] #---extension[0]--- 95: 01 # type=1: SubjectKeyIdentifier 96: 54 # value=byte[20] 97: 1F3BC19DE194830066C6EAE7CB9D211339EDD942 #---extension[1]--- 117: 02 # type=2: KeyUsage 118: 18 60 # value=96: [keyCertSign, cRLSign] #---extension[2]--- 120: 23 # type=-4: BasicConstraints, critical 121: 20 # value=-1: CA: true, pathLenConstraint: # unlimited #---extension[3]--- 122: 08 # type=8: ExtendedKeyUsage 123: 01 # value=1: serverAuth 124: 58 40 # [10]. signature value=byte[64] 126: 8A25E8AABBA4B19B8E0D1596A476C2C42F5068F5F3457606806E2F284A 155: 22E6E71EF91E63F35636A4D497E1FB4D3C393ADCDB09D92E02E0194D70 184: 3ECD98EB2D79 ]]>
Compressed Weierstrass EC Public Key On Curve secp256r1
  • Self-signed certificate
  • EC public key on the curve secp256r1, compressed only in the C509 certificates
  • Signature algorithm: ecdsa-with-sha256
  • Subject: a commonName containing an even number of lowercase hexadecimal characters
  • Extensions
    • Basic Constraints: CA, without pathLenConstraint
    • Extended Key Usage: only an integer-identified usage
    • Subject Key Identifier
Private Key See
X.509 Certificate See
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (158 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the public key identifier.
C509 Type 2 Certificate Plain hex (158 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 48 # [6]. subject=byte[8] 18: 1234567890ABCDEF 26: 01 # [7]. subjectPublicKeyAlg=1: EC public key on # curve secp256r1 27: 58 21 # [8]. subject public key=EC point=byte[33] 29: FDF413596A87125995B4E0D8B7BEFBC4D6EDB11F61AF08AB32408D4FF9 58: F9078DDB 62: 88 # [9]. extensions=array[8] #---extension[0]--- 63: 01 # type=1: SubjectKeyIdentifier 64: 54 # value=byte[20] 65: 26CD540B3E3D99A64AAB0B62ECA277B4359EAD04 #---extension[1]--- 85: 02 # type=2: KeyUsage 86: 18 60 # value=96: [keyCertSign, cRLSign] #---extension[2]--- 88: 23 # type=-4: BasicConstraints, critical 89: 20 # value=-1: CA: true, pathLenConstraint: # unlimited #---extension[3]--- 90: 08 # type=8: ExtendedKeyUsage 91: 01 # value=1: serverAuth 92: 58 40 # [10]. signature value=byte[64] 94: 8A25E8AABBA4B19B8E0D1596A476C2C42F5068F5F3457606806E2F284A 123: 22E6E7017CEE1E3B865C5EEA2A7946503C5BA1C39424F71ACDC6AFA5FB 152: 55F7E397B83C ]]>
Weierstrass EC Public Key On Curve secp384r1
  • Self-signed certificate
  • EC public key on the curve secp384r1
  • Subject: a commonName containing free-form text
  • Extensions
    • Basic Constraints: CA, with pathLenConstraint
    • Extended Key Usage: only an OID-identified usage
    • Certificate Policies
    • Inhibit anyPolicy
Private Key
X.509 Certificate PEM content (539 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (309 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (309 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 72 # [6]. subject=char[18] 18: 73656C667369676E2D73656370333834 # "selfsign-secp384" 34: 7231 # "r1" 36: 02 # [7]. subjectPublicKeyAlg=2: EC public key on # curve secp384r1 37: 58 61 # [8]. subject public key=EC point=byte[97] 39: 04DD6762F035899451372B2FE9B52A8314AD10E2C4363C5A5849E296FE 68: 51AAB9BFD03AB038D33418A0BCD83280ABA0BD9104017165C048B5346B 97: 54109E449FCC889E4EE870B5F8A2C63DAE414DE19755BE278A175E040D 126: 4A4C1A0EE46E924A5C29 136: 8A # [9]. extensions=array[10] #---extension[0]--- 137: 02 # type=2: KeyUsage 138: 18 60 # value=96: [keyCertSign, cRLSign] #---extension[1]--- 140: 23 # type=-4: BasicConstraints, critical 141: 01 # value=1: CA: true, pathLenConstraint: 1 #---extension[2]--- 142: 06 # type=6: CertificatePolicies 143: 84 # value=array[4] #---CertificatePolicy[0]--- 144: 03 # PolicyIdentifier=3: individual-validated 145: 80 # PolicyQualifierInfos=array[0] #---CertificatePolicy[1]--- 146: 00 # PolicyIdentifier=0: anyPolicy 147: 84 # PolicyQualifierInfos=array[4] #---PolicyQualifierInfo[0]--- 148: 01 # policyQualifierId=1: domain-validated 149: 76 # qualifier=char[22] 150: 687474703A2F2F6370732E6578616D # "http://cps.exam" 165: 706C652E636F6D # "ple.com" #---PolicyQualifierInfo[1]--- 172: 02 # policyQualifierId=2: # organization-validated 173: 77 # qualifier=char[23] 174: 746869732069732074686520757365 # "this is the use" 189: 72206E6F74696365 # "r notice" #---extension[3]--- 197: 08 # type=8: ExtendedKeyUsage 198: 49 # value=byte[9]: 199: 2B0601040181FD5904 # oid: 1.3.6.1.4.1.32473.4 #---extension[4]--- 208: 18 1E # type=30: InhibitAnyPolicy 210: 00 # value=simple-uint(0) 211: 58 60 # [10]. signature value=byte[96] 213: 347EB5ED49E1F6536E2A3F3B5DF1C12D9BAEF440DFBC42BD45D31F4B3F 242: DABDFA9D685A84582D98B1B2474210F1C785DA055BE26787AB4DD58FD3 271: 30E3435AC84EBE49A4382FB964591C3EACC9A04F3814FC2964C1B4B201 300: C013AE7CCB3727CDF7 ]]>
Weierstrass EC Public Key On Curve secp521r1
  • Self-signed certificate
  • EC public key on the curve secp521r1
  • Signature algorithm: ecdsa-with-sha512
  • Subject: empty
  • Extensions
    • Basic Constraints: non-CA
    • Extended Key Usage: integer-identified and OID-identified usages
    • Subject Alternative Name
Private Key
X.509 Certificate PEM content (811 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (531 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (531 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 72 # [6]. subject=char[18] 18: 73656C667369676E2D73656370353231 # "selfsign-secp521" 34: 7231 # "r1" 36: 03 # [7]. subjectPublicKeyAlg=3: EC public key on # curve secp521r1 37: 58 85 # [8]. subject public key=EC point=byte[133] 39: 04005538CE8F7CDE229335C85958AACD029DDF65CFC2A72A75055E63B8 68: FE59D07FB4BDF10DB7B8BA7D57C5C691EB96EAB97411615A6A430E5178 97: 7031719CEBC305E69200705CC828B9755F8FD53452B777A40CB6792554 126: E5718BAB91EA3F03086A4072A47047CEEC2493C384045FCC6ED8E4F748 155: A5223AF12901EB2E19A6C288951C939B05 172: 88 # [9]. extensions=array[8] #---extension[0]--- 173: 02 # type=2: KeyUsage 174: 01 # value=1: [digitalSignature] #---extension[1]--- 175: 03 # type=3: SubjectAlternativeName 176: 96 # value=array[22] #---GeneralName[0]--- 177: 04 # GeneralNameType=4: directoryName 178: 84 # GeneralNameValue=array[4], 2 attributes #---attribute[0]--- 179: 04 # type=4: country 180: 62 # value=char[2] 181: 4445 # "DE" #---attribute[1]--- 183: 01 # type=1: commonName 184: 67 # value=char[7] 185: 6578616D706C65 # "example" #---GeneralName[1]--- 192: 02 # GeneralNameType=2: dNSName 193: 6F # GeneralNameValue=char[15] 194: 6162632E6578616D706C652E636F6D # "abc.example.com" #---GeneralName[2]--- 209: 01 # GeneralNameType=1: rfc822Name 210: 6F # GeneralNameValue=char[15] 211: 616263406578616D706C652E636F6D # "abc@example.com" #---GeneralName[3]--- 226: 21 # GeneralNameType=-2: on-SmtpUTF8Mailbox 227: 74 # GeneralNameValue=char[20] 228: 736D747075746638406578616D706C65 # "smtputf8@example" 244: 2E636F6D # ".com" #---GeneralName[4]--- 248: 06 # GeneralNameType=6: uri 249: 78 1C # GeneralNameValue=char[28] 251: 687474703A2F2F6D797572692E657861 # "http://myuri.exa" 267: 6D706C652E636F6D2F616263 # "mple.com/abc" #---GeneralName[5]--- 279: 08 # GeneralNameType=8: registeredID 280: 49 # GeneralNameValue=byte[9]: 281: 2B0601040181FD5908 # oid: 1.3.6.1.4.1.32473.8 #---GeneralName[6]--- 290: 07 # GeneralNameType=7: iPAddress 291: 44 # GeneralNameValue=byte[4] 292: 11111111 #---GeneralName[7]--- 296: 00 # GeneralNameType=0: otherName 297: 82 # GeneralNameValue=array[2] 298: 49 # id=byte[9]: 299: 2B0601040181FD5901 # oid: 1.3.6.1.4.1.32473.1 308: 4C # value=byte[12] 309: 040A22222222222222222222 #---GeneralName[8]--- 321: 22 # GeneralNameType=-3: on-MACAddress 322: 46 # GeneralNameValue=byte[6] 323: 222222222222 #---GeneralName[9]--- 329: 21 # GeneralNameType=-2: on-SmtpUTF8Mailbox 330: 78 1C # GeneralNameValue=char[28] 332: 736D74702E757466386D61696C626F78 # "smtp.utf8mailbox" 348: 406578616D706C652E636F6D # "@example.com" #---GeneralName[10]--- 360: 20 # GeneralNameType=-1: # on-hardwareModuleName 361: 82 # GeneralNameValue=array[2] 362: 49 # id=byte[9]: 363: 2B0601040181FD5902 # oid: 1.3.6.1.4.1.32473.2 372: 52 # value=byte[18] 373: 041033333333333333333333333333333333 #---extension[2]--- 391: 23 # type=-4: BasicConstraints, critical 392: 21 # value=-2: CA: false #---extension[3]--- 393: 08 # type=8: ExtendedKeyUsage 394: 82 # value=array[2] 395: 02 # 2: clientAuth 396: 01 # 1: serverAuth 397: 58 84 # [10]. signature value=byte[132] 399: 012F8358F64621CA68F7DB644AEFE37958041A686436AFCEDDE70ACEBA 428: 73744D70147784A41AD67673A1EE5B3B9B1A8351553A29E87815ABFCCA 457: 5D1DE1099F284B4C013D3594A3444D9D9E9048B5505F17E183FD49EC74 486: C0372823602D057B6A9C86C8238C29135D4EC6C10ABCE9CE22144AF857 515: 0C6D4ED42D4576F2CF6A38C975F5EA48 ]]>
Weierstrass EC Public Key On Curve sm2p256v1
  • Self-signed certificate
  • EC public key on the curve sm2p256v1
  • Signature algorithm: sm2-with-sm3
  • Subject:
    • serialNumber
    • organization
    • organizationalUnit
    • organizationIdentifier
  • Extensions:
    • Policy Constraints containing only inhibitPolicyMapping
    • Name Constraints containing only excludedSubTrees
Private Key
X.509 Certificate PEM content (644 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (326 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (326 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 8A # [6]. subject=array[10], 5 attributes #---attribute[0]--- 18: 01 # type=1: commonName 19: 72 # value=char[18] 20: 73656C667369676E2D736D3270323536 # "selfsign-sm2p256" 36: 7631 # "v1" #---attribute[1]--- 38: 03 # type=3: serialNumber 39: 6F # value=char[15] 40: 6D792073657269616C4E756D626572 # "my serialNumber" #---attribute[2]--- 55: 08 # type=8: organization 56: 6F # value=char[15] 57: 6D79206F7267616E697A6174696F6E # "my organization" #---attribute[3]--- 72: 09 # type=9: organizationalUnit 73: 75 # value=char[21] 74: 6D79206F7267616E697A6174696F6E61 # "my organizationa" 90: 6C556E6974 # "lUnit" #---attribute[4]--- 95: 12 # type=18: organizationIdentifier 96: 78 19 # value=char[25] 98: 6D79206F7267616E697A6174696F6E49 # "my organizationI" 114: 64656E746966696572 # "dentifier" 123: 06 # [7]. subjectPublicKeyAlg=6: EC public key on # curve sm2p256v1 124: 58 41 # [8]. subject public key=EC point=byte[65] 126: 0495FFF4BE8611C8149C81ADEC14125DACCA746A2F3FE38CD2EAB711E8 155: C99F101FBB448423F166F9FFD98F0E321597BB394835A6FB240337A389 184: 12907A22C3F04A 191: 86 # [9]. extensions=array[6] #---extension[0]--- 192: 02 # type=2: KeyUsage 193: 01 # value=1: [digitalSignature] #---extension[1]--- 194: 18 1A # type=26: NameConstraints 196: 82 # value=array[2] 197: F6 # permittedSubtrees= 198: 84 # excludedSubtrees=array[4] #---GeneralName[0]--- 199: 02 # GeneralNameType=2: dNSName 200: 78 19 # GeneralNameValue=char[25] 202: 6578636C756465642E646E73312E65 # "excluded.dns1.e" 217: 78616D706C652E636F6D # "xample.com" #---GeneralName[1]--- 227: 02 # GeneralNameType=2: dNSName 228: 78 19 # GeneralNameValue=char[25] 230: 6578636C756465642E646E73322E65 # "excluded.dns2.e" 245: 78616D706C652E636F6D # "xample.com" #---extension[2]--- 255: 18 1C # type=28: PolicyConstraints 257: 82 # value=array[2] 258: F6 # requireExplicitPolicy= 259: 02 # inhibitPolicyMapping=2 260: 58 40 # [10]. signature value=byte[64] 262: 59F40C77AE8AC0BD0638E0B822001FD47EEF15667C7034436A95C97E94 291: CEEE5FEFA1441C1F6537A76692605BED70A1168D2AFE6B03B4E9F92502 320: 4D1B76729555 ]]>
Weierstrass EC Public Key On Curve brainpoolP256r1
  • Self-signed certificate
  • EC public key on the curve brainpoolP256r1
  • Signature algorithm: ecdsa-with-shake128
  • Subject:
    • country
    • state
    • locality
    • postalCode
    • street
  • Extensions:
    • IPAddrBlocks with SAFI = null and IP Address Choice = null
    • IPAddrBlocks V2 with SAFI = null and IP Address Choice = null
    • ASIdentifiers
    • ASIdentifiers V2
Private Key
X.509 Certificate PEM content (646 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (264 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (264 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 8C # [6]. subject=array[12], 6 attributes #---attribute[0]--- 18: 01 # type=1: commonName 19: 78 18 # value=char[24] 21: 73656C667369676E2D627261696E706F # "selfsign-brainpo" 37: 6F6C703235367231 # "olp256r1" #---attribute[1]--- 45: 04 # type=4: country 46: 62 # value=char[2] 47: 4445 # "DE" #---attribute[2]--- 49: 05 # type=5: locality 50: 6B # value=char[11] 51: 6D79206C6F63616C697479 # "my locality" #---attribute[3]--- 62: 06 # type=6: state 63: 68 # value=char[8] 64: 6D79207374617465 # "my state" #---attribute[4]--- 72: 07 # type=7: street 73: 69 # value=char[9] 74: 6D7920737472656574 # "my street" #---attribute[5]--- 83: 0C # type=12: postalCode 84: 6D # value=char[13] 85: 6D7920706F7374616C436F6465 # "my postalCode" 98: 18 18 # [7]. subjectPublicKeyAlg=24: EC public key # on curve brainpoolp256r1 100: 58 41 # [8]. subject public key=EC point=byte[65] 102: 0477B077412EE98950779ED882FFCB1648E014272354469624F5BCE2F1 131: 4F3242AD4ACC5686A86508D59FB729FDC29811188D8BF016CE4A515105 160: 4DAF888C48D5ED 167: 8A # [9]. extensions=array[10] #---extension[0]--- 168: 02 # type=2: KeyUsage 169: 01 # value=1: [digitalSignature] #---extension[1]--- 170: 18 20 # type=32: IPAddrBlocks 172: 86 # value=array[6] #---IPAddrBlock[0]--- 173: 01 # AFI=1: IPv4 174: F6 # SAFI= 175: F6 # IP Address Choice= #---IPAddrBlock[1]--- 176: 02 # AFI=2: IPv6 177: F6 # SAFI= 178: F6 # IP Address Choice= #---extension[2]--- 179: 18 21 # type=33: ASIdentifiers 181: 82 # value=array[2] 182: 02 # id=2 183: 82 # range=array[2] 184: 01 # min=1 185: 03 # max=3 #---extension[3]--- 186: 18 22 # type=34: IPAddrBlocksV2 188: 86 # value=array[6] #---IPAddrBlock[0]--- 189: 01 # AFI=1: IPv4 190: 01 # SAFI=1: unicast 191: F6 # IP Address Choice= #---IPAddrBlock[1]--- 192: 02 # AFI=2: IPv6 193: 01 # SAFI=1: unicast 194: F6 # IP Address Choice= #---extension[4]--- 195: 18 23 # type=35: ASIdentifiersV2 197: F6 # value= 198: 58 40 # [10]. signature value=byte[64] 200: 4BF673AB08781A572889717416F5B662A188B3218506F1780EB1D17C8B 229: 0207FF9F318BB7DBFD17F6C829E93C0CDCB657E795436FA8FC4240A71F 258: 223DC0366059 ]]>
Weierstrass EC Public Key On Curve brainpoolP384r1
  • Self-signed certificate
  • EC public key on the curve brainpoolP384r1
  • Signature algorithm: ecdsa-with-sha384
  • Subject:
    • surname
    • givenName
    • title
    • name
  • Extensions:
    • IPAddrBlocks with non-null SAFI and IntIPAddressChoice`
    • IPAddrBlocks V2 with non-null SAFI, IntIPAddressChoice and IPAddressChoice
Private Key
X.509 Certificate PEM content (717 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (406 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (406 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 8A # [6]. subject=array[10], 5 attributes #---attribute[0]--- 18: 01 # type=1: commonName 19: 78 18 # value=char[24] 21: 73656C667369676E2D627261696E706F # "selfsign-brainpo" 37: 6F6C703338347231 # "olp384r1" #---attribute[1]--- 45: 02 # type=2: surname 46: 6A # value=char[10] 47: 6D79207375726E616D65 # "my surname" #---attribute[2]--- 57: 0A # type=10: title 58: 68 # value=char[8] 59: 6D79207469746C65 # "my title" #---attribute[3]--- 67: 0D # type=13: givenName 68: 6C # value=char[12] 69: 6D7920676976656E4E616D65 # "my givenName" #---attribute[4]--- 81: 18 19 # type=25: name 83: 67 # value=char[7] 84: 6D79206E616D65 # "my name" 91: 18 19 # [7]. subjectPublicKeyAlg=25: EC public key # on curve brainpoolp384r1 93: 58 61 # [8]. subject public key=EC point=byte[97] 95: 046709C992919B49C48FD931D05C497D3865E6084C91DF3A4C7E781F41 124: 8543B023D59E8BF25D133FB1A094E9D42C8FA6ED3B46E9883A35ABD4B0 153: A9D30AAEFD9B7E88ED3800565D1E7F0633134D6519292D49BD55EC30A1 182: 67197FEC0F7429822B95 192: 86 # [9]. extensions=array[6] #---extension[0]--- 193: 02 # type=2: KeyUsage 194: 01 # value=1: [digitalSignature] #---extension[1]--- 195: 18 20 # type=32: IPAddrBlocks 197: 86 # value=array[6] #---IPAddrBlock[0]--- 198: 01 # AFI=1: IPv4 199: F6 # SAFI= 200: 83 # IntIPAddressChoice=array[3] 201: 1A 01C00002 # [0]=AddressPrefix=29360130 206: 1B 00000005C47363FE # [1]=AddressPrefix=24770733054 215: 3B 00000005C468638E # [2]=AddressPrefix=-24770012047 #---IPAddrBlock[1]--- 224: 02 # AFI=2: IPv6 225: F6 # SAFI= 226: 82 # IntIPAddressChoice=array[2] 227: 1B 000120010DB81234 # [0]=AddressPrefix=316663873933876 236: 82 # [1]=AddressRange=array[2] 237: 3B 000120010C78132D # min=-316663852962606 246: 09 # max=9 #---extension[2]--- 247: 18 22 # type=34: IPAddrBlocksV2 249: 86 # value=array[6] #---IPAddrBlock[0]--- 250: 01 # AFI=1: IPv4 251: 01 # SAFI=1: unicast 252: 83 # IntIPAddressChoice=array[3] 253: 1A 01C00002 # [0]=AddressPrefix=29360130 258: 1B 00000005C47363FE # [1]=AddressPrefix=24770733054 267: 3B 00000005C468638E # [2]=AddressPrefix=-24770012047 #---IPAddrBlock[1]--- 276: 02 # AFI=2: IPv6 277: 01 # SAFI=1: unicast 278: 82 # IPAddressChoice=array[2] 279: 47 # [0]=AddressPrefix=byte[7] 280: 0020010DB81234 287: 82 # [1]=AddressRange=array[2] 288: 45 # min=byte[5] 289: 003FFF0003 294: 4D # max=byte[13] 295: 003FFF01220000223333445566 308: 58 60 # [10]. signature value=byte[96] 310: 6709C992919B49C48FD931D05C497D3865E6084C91DF3A4C7E781F4185 339: 43B023D59E8BF25D133FB1A094E9D42C8FA6ED01853890E65008EADEEA 368: B4914203C9AE8EC9DA8908B30BFA61E9A1618C2047C3ECF3BAB63E2008 397: D66C9DE3B4F3AE0193 ]]>
Weierstrass EC Public Key On Curve brainpoolP512r1
  • Self-signed certificate
  • EC public key on the curve brainpoolP512r1
  • Signature algorithm: ecdsa-with-shake256
  • Subject:
    • jurisdictionCountryName
    • jurisdictionStateOrProvinceName
    • jurisdictionLocalityName
  • Extensions:
    • Subject Directory Attributes
    • Subject Information Access
    • Policy Mappings
Private Key
X.509 Certificate PEM content (809 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (432 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (432 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 88 # [6]. subject=array[8], 4 attributes #---attribute[0]--- 18: 01 # type=1: commonName 19: 78 18 # value=char[24] 21: 73656C667369676E2D627261696E706F # "selfsign-brainpo" 37: 6F6C703531327231 # "olp512r1" #---attribute[1]--- 45: 13 # type=19: jurisdictionLocalityName 46: 77 # value=char[23] 47: 6D79206A7572697364696374696F6E4C # "my jurisdictionL" 63: 6F63616C697479 # "ocality" #---attribute[2]--- 70: 14 # type=20: jurisdictionStateOrProvinceName 71: 74 # value=char[20] 72: 6D79206A7572697364696374696F6E53 # "my jurisdictionS" 88: 74617465 # "tate" #---attribute[3]--- 92: 15 # type=21: jurisdictionCountryName 93: 62 # value=char[2] 94: 5345 # "SE" 96: 18 1A # [7]. subjectPublicKeyAlg=26: EC public key # on curve brainpoolp512r1 98: 58 81 # [8]. subject public key=EC point=byte[129] 100: 046D327067D334CE53FA29317AA207B85CA237623F19A10C594BF024FC 129: 3FFEB64FAB5884D0D448A271552E02E7CF44D8BF104DA182CEC1DE895C 158: 8418B8529D9B8B2C4B80A736DDC56471D6A52C6CE414E69D57356B15FC 187: 08A46B61FA5B721FABC76932F3836DADE4F70F6F0CACB8D3351A7EB54E 216: FF077C402368C49BB715B53458 229: 88 # [9]. extensions=array[8] #---extension[0]--- 230: 02 # type=2: KeyUsage 231: 01 # value=1: [digitalSignature] #---extension[1]--- 232: 18 18 # type=24: SubjectDirectoryAttributes 234: 82 # value=array[2], 1 attribute #---attribute[0]--- 235: 04 # attributeType=4: country 236: 82 # attributeValue=array[2] 237: 62 # [0]=char[2] 238: 4445 # "DE" 240: 62 # [1]=char[2] 241: 5345 # "SE" #---extension[2]--- 243: 18 1B # type=27: PolicyMappings 245: 84 # value=array[4] #---policyMapping[0]--- 246: 02 # issuerDomainPolicy=2: # organization-validated 247: 01 # subjectDomainPolicy=1: domain-validated #---policyMapping[1]--- 248: 49 # issuerDomainPolicy=byte[9]: 249: 2B0601040181FD5906 # oid: 1.3.6.1.4.1.32473.6 258: 49 # subjectDomainPolicy=byte[9]: 259: 2B0601040181FD5907 # oid: 1.3.6.1.4.1.32473.7 #---extension[3]--- 268: 18 1F # type=31: SubjectInfoAccess 270: 82 # value=array[2] #---AccessDescription[0]--- 271: 02 # accessMethod=2: caIssuers 272: 78 1C # uri=char[28] 274: 687474703A2F2F636169737375657273 # "http://caissuers" 290: 2E6578616D706C652E636F6D # ".example.com" 302: 58 80 # [10]. signature value=byte[128] 304: A0B9ED538672D0B80E48F3D7C4E902503BAC0BDC88B45DAC784DDCFA55 333: 1AF188B6E2E51F6E695D7CFC91396BEB17FD91CF9C82D1FB819FEA09C9 362: C4AC9BDCEF1B9AE37BD98556C3917E9D2FA7327C4FDE6A6CFC99320B3C 391: A097766A9C1A41227A5227CE4F29079B59D533DEAFDE51B599B052C911 420: 78BE8FA29F86F0FADBC412F9 ]]>
Weierstrass EC Public Key On Curve frp256v1
  • Self-signed certificate
  • EC public key on the curve frp256v1
  • Signature algorithm: ecdsa-with-sha1
  • Subject:
    • emailAddress
    • telephoneNumber
    • businessCategory
  • Extensions:
    • Policy Constraints containing only requireExplicitPolicy
    • Name Constraints containing only permittedSubTrees
Private Key
X.509 Certificate PEM content (584 bytes): Textual Representation: ### C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (303 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (303 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: 88 # [6]. subject=array[8], 4 attributes #---attribute[0]--- 19: 00 # type=0: emailAddress 20: 6F # value=char[15] 21: 616263406578616D706C652E6F7267 # "abc@example.org" #---attribute[1]--- 36: 01 # type=1: commonName 37: 71 # value=char[17] 38: 73656C667369676E2D66727032353676 # "selfsign-frp256v" 54: 31 # "1" #---attribute[2]--- 55: 0B # type=11: businessCategory 56: 73 # value=char[19] 57: 6D7920627573696E6573734361746567 # "my businessCateg" 73: 6F7279 # "ory" #---attribute[3]--- 76: 18 1A # type=26: telephoneNumber 78: 72 # value=char[18] 79: 6D792074656C6570686F6E654E756D62 # "my telephoneNumb" 95: 6572 # "er" 97: 18 1B # [7]. subjectPublicKeyAlg=27: EC public key # on curve frp256v1 99: 58 41 # [8]. subject public key=EC point=byte[65] 101: 04378D2D28A1F6547124F2DB6A42F63915BFA2F6537AE20CF0417D675F 130: BE6603DA80A4CF3F1E43633343AB3BE80150EC04E9649DD62705BC055B 159: DCDA791EB25062 166: 86 # [9]. extensions=array[6] #---extension[0]--- 167: 02 # type=2: KeyUsage 168: 01 # value=1: [digitalSignature] #---extension[1]--- 169: 18 1A # type=26: NameConstraints 171: 82 # value=array[2] 172: 84 # permittedSubtrees=array[4] #---GeneralName[0]--- 173: 02 # GeneralNameType=2: dNSName 174: 78 1A # GeneralNameValue=char[26] 176: 7065726D69747465642E646E73312E # "permitted.dns1." 191: 6578616D706C652E636F6D # "example.com" #---GeneralName[1]--- 202: 02 # GeneralNameType=2: dNSName 203: 78 1A # GeneralNameValue=char[26] 205: 7065726D69747465642E646E73322E # "permitted.dns2." 220: 6578616D706C652E636F6D # "example.com" 231: F6 # excludedSubtrees= #---extension[2]--- 232: 18 1C # type=28: PolicyConstraints 234: 82 # value=array[2] 235: 01 # requireExplicitPolicy=1 236: F6 # inhibitPolicyMapping= 237: 58 40 # [10]. signature value=byte[64] 239: 378D2D28A1F6547124F2DB6A42F63915BFA2F6537AE20CF0417D675FBE 268: 6603DA6F2D4CE3787CBACE549599BC5F3BAACCA2B7E67352E4A6BA1F44 297: 96CEAD53D8E6 ]]>
Montgomery EC Public Key On Curve X25519
  • X25519 public key
  • Extensions
    • authorityKeyIdentifier containing only the keyIdentifier component
    • authorityInfoAccess
    • issuerAltName
Private Key
X.509 Certificate
  • Issued by the CA in .
PEM content (677 bytes): Textual Representation: Subject Public Key Info: Public Key Algorithm: X25519 Pub: 8a:ff:51:6f:ac:71:24:41:50:e7:0f:92:77:f4:ad:f7:fb:29: f4:1a:7a:4a:88:28:bd:47:67:22:fc:1b:7f:08 X509v3 extensions: X509v3 keyUsage: keyEncipherment, keyEncipherment X509v3 authorityKeyIdentifier: 7f:cd:b8:2d:04:95:2e:1a:36:b9:0a:f3:7a:3c:f1:66:d1:5e:f9:21 X509v3 authorityInfoAccess: OCSP: URI: http://ocsp.example.com CA Issuers: URI: http://caissuers.example.com ad-caRepository: URI: http://carepository.example.com ad-timeStamping: URI: http://timestamping.example.com ad-caRepository: URI: http://carepository.example.com RPKI Manifest: URI: http://rpkimanifest.example.com Signed Object: URI: http://signedobject.example.com RPKI Notify: URI: http://rpkinotify.example.com 1.3.6.1.4.1.32473.3: URI: http://1234.example.com X509v3 issuerAlternativeName: 30:09:82:07:61:62:63:2e:63:6f:6d Signature Algorithm: ED25519 Signature Value: 4b:12:fa:f4:cb:ba:74:33:11:54:6e:26:c0:31:1e:2b:4c:b9: d5:15:2b:c8:02:6c:7a:03:5f:1f:8f:5a:15:6a:54:b2:b4:85: d0:1b:6b:a5:91:db:7d:b1:1c:20:51:74:37:27:3b:64:5b:d2: 2a:95:91:0e:47:e2:a2:0e:27:0b ]]>
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (455 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate
  • Issued by the CA in .
Plain hex (455 bytes): Annotated hex:
Montgomery EC Public Key On Curve X448
  • X448 public key
  • Extensions:
    • authorityKeyIdentifier containing all fields
    • crlDistributionPoints
    • freshestCRL
Private Key
X.509 Certificate
  • Issued by the CA in .
PEM content (572 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (367 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate
  • Issued by the CA in .
Plain hex (367 bytes): Annotated hex:
Edwards EC Public Key On Curve ED25519
  • Self-signed certificate
  • Edwards public key Ed25519
  • Signature algorithm: ed25519
  • Subject:
    • domainComponent
    • dnQualifier
    • dmdName
    • unstructuredName
    • unstructuredAddress
    • generationQualifier
  • Extensions:
    • Policy Constraints containing both requireExplicitPolicy and inhibitPolicyMapping
    • Name Constraints containing both permittedSubTrees and excludedSubTrees
Private Key
X.509 Certificate PEM content (784 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (384 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (384 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 8E # [6]. subject=array[14], 7 attributes #---attribute[0]--- 18: 01 # type=1: commonName 19: 70 # value=char[16] 20: 73656C667369676E2D65643235353139 # "selfsign-ed25519" #---attribute[1]--- 36: 0F # type=15: generationQualifier 37: 76 # value=char[22] 38: 6D792067656E65726174696F6E517561 # "my generationQua" 54: 6C6966696572 # "lifier" #---attribute[2]--- 60: 10 # type=16: DNQualifier 61: 6E # value=char[14] 62: 6D7920646E5175616C6966696572 # "my dnQualifier" #---attribute[3]--- 76: 16 # type=22: domainComponent 77: 72 # value=char[18] 78: 6D7920646F6D61696E436F6D706F6E65 # "my domainCompone" 94: 6E74 # "nt" #---attribute[4]--- 96: 18 1B # type=27: DMDName 98: 6A # value=char[10] 99: 6D7920646D644E616D65 # "my dmdName" #---attribute[5]--- 109: 18 1D # type=29: unstructuredName 111: 73 # value=char[19] 112: 6D7920756E737472756374757265644E # "my unstructuredN" 128: 616D65 # "ame" #---attribute[6]--- 131: 18 1E # type=30: unstructuredAddress 133: 76 # value=char[22] 134: 6D7920756E7374727563747572656441 # "my unstructuredA" 150: 646472657373 # "ddress" 156: 0C # [7]. subjectPublicKeyAlg=12: Ed25519 157: 58 20 # [8]. subject public key=EC point=byte[32] 159: 46270AEC0F32837E128779D30B249C531D6D42C1AC29E402328EDC79FA 188: C2BE95 191: 86 # [9]. extensions=array[6] #---extension[0]--- 192: 02 # type=2: KeyUsage 193: 01 # value=1: [digitalSignature] #---extension[1]--- 194: 18 1A # type=26: NameConstraints 196: 82 # value=array[2] 197: 84 # permittedSubtrees=array[4] #---GeneralName[0]--- 198: 02 # GeneralNameType=2: dNSName 199: 78 1A # GeneralNameValue=char[26] 201: 7065726D69747465642E646E73312E # "permitted.dns1." 216: 6578616D706C652E636F6D # "example.com" #---GeneralName[1]--- 227: 02 # GeneralNameType=2: dNSName 228: 78 1A # GeneralNameValue=char[26] 230: 7065726D69747465642E646E73322E # "permitted.dns2." 245: 6578616D706C652E636F6D # "example.com" 256: 84 # excludedSubtrees=array[4] #---GeneralName[0]--- 257: 02 # GeneralNameType=2: dNSName 258: 78 19 # GeneralNameValue=char[25] 260: 6578636C756465642E646E73312E65 # "excluded.dns1.e" 275: 78616D706C652E636F6D # "xample.com" #---GeneralName[1]--- 285: 02 # GeneralNameType=2: dNSName 286: 78 19 # GeneralNameValue=char[25] 288: 6578636C756465642E646E73322E65 # "excluded.dns2.e" 303: 78616D706C652E636F6D # "xample.com" #---extension[2]--- 313: 18 1C # type=28: PolicyConstraints 315: 82 # value=array[2] 316: 01 # requireExplicitPolicy=1 317: 02 # inhibitPolicyMapping=2 318: 58 40 # [10]. signature value=byte[64] 320: 213CF14F253BCECA58A1CDF0AAD3565E01D6612461F86DBACC6E014099 349: 5AC3EEF507AF1341D604243751562CCB363B0C72C989E9D2F260C59422 378: 8342AFAC7B00 ]]>
Edwards EC Public Key On Curve ED448
  • Self-signed certificate
  • Edwards public key Ed448
  • Signature algorithm: ed448
  • Subject:
    • initials
    • pseudonym
    • userId
  • Extensions:
    • OCSP No Check
    • TLS Features
Private Key
X.509 Certificate PEM content (503 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (261 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (261 bytes): Annotated hex: 7: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 12: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 17: 88 # [6]. subject=array[8], 4 attributes #---attribute[0]--- 18: 01 # type=1: commonName 19: 6E # value=char[14] 20: 73656C667369676E2D6564343438 # "selfsign-ed448" #---attribute[1]--- 34: 0E # type=14: initials 35: 6B # value=char[11] 36: 6D7920696E697469616C73 # "my initials" #---attribute[2]--- 47: 11 # type=17: pseudonym 48: 6C # value=char[12] 49: 6D792070736575646F6E796D # "my pseudonym" #---attribute[3]--- 61: 18 1C # type=28: userID 63: 69 # value=char[9] 64: 6D7920757365726964 # "my userid" 73: 0D # [7]. subjectPublicKeyAlg=13: Ed448 74: 58 39 # [8]. subject public key=EC point=byte[57] 76: 8C35E491DB58702D7B99167C19F86B2681EA25D21F83AC6EC78040A904 105: 114FCB1DCF239F6C4D845147F7E22793A891A9F9CA5D1E20A7398C80 133: 86 # [9]. extensions=array[6] #---extension[0]--- 134: 02 # type=2: KeyUsage 135: 01 # value=1: [digitalSignature] #---extension[1]--- 136: 18 24 # type=36: OCSPNoCheck 138: F6 # value= #---extension[2]--- 139: 18 26 # type=38: TLSFeatures 141: 82 # value=array[2] 142: 18 2C # cookie (44) 144: 10 # application layer protocol negotiation # (16) 145: 58 72 # [10]. signature value=byte[114] 147: 5E12D7D2F577CBDB36BA15DD9EA97B9BB9B49284210308CCFB2B1C2F9E 176: 2FF80398CC5D4F50293AFD24C5BCE3569379D344BCC4D31C6062A400EC 205: 582489B9F8B8CDCF0F4F2C2C38482A6201B78D9B222B8E7CF75431BDBE 234: 4FA9061B066DA656B5509F36D6005D0C2B602018B79E79C9A20A00 ]]>
Certificates With Different Signature Algorithms
RSASSA-PKCS1-v1_5 With SHA-1
  • Self-signed certificate
  • Signature algorithm: sha1WithRSAEncryption
Private Key See .
X.509 Certificate PEM content (463 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (303 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (303 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: 76 # [6]. subject=char[22] 19: 73656C667369676E2D7273612D776974 # "selfsign-rsa-wit" 35: 682D73686131 # "h-sha1" 41: 00 # [7]. subjectPublicKeyAlg=0: RSA 42: 58 80 # [8]. subject public key=modulus=byte[128] 44: B8092F6F04726A921CFAB2D313AE9D2F01C7CE465FAB7DA62C7A5C73FA 73: CE5FFBA2F1DD80A29ADC43399CFCA22279B89A264810E5B926BB5E0D3F 102: 727A763E16013F89F8FEAC59D0FBDD5E8B0C52827E5490F13B84C3634E 131: 89C6D1731AE5F1A60F88ED118D080E1AB2CAA532D06C2F7D2A0874DEE4 160: E6B6E57283F6478DAF4253DB 172: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 173: 58 80 # [10]. signature value=byte[128] 175: 0150926C5642D9CB2AAA27A17B68FBBFC9F47AA42CD9E6779B4E9A7A81 204: C760589C53AC23BAD6A94F5A6B275BE292B79BA9CB59D045E44809353D 233: CE73C936A06EC20D51AE24C559DDB02EBF4B0838F515328058F601D91F 262: 6DAE5BFF55DC78DEB80970D2F74757FC5F96BE6F217825DC8286D9446C 291: CA0C9AF257FCE66CD963F891 ]]>
ECDSA With SHA1
  • Signature algorithm: ecdsa-with-sha1
See .
ECDSA With SHA256
  • Signature algorithm: ecdsa-with-sha256
See .
ECDSA With SHA384
  • Signature algorithm: ecdsa-with-sha384
See .
ECDSA With SHA512
  • Signature algorithm: ecdsa-with-sha512
See .
ECDSA With SHAKE128
  • Signature algorithm: ecdsa-with-shake128
See .
ECDSA With SHAKE256
  • Signature algorithm: ecdsa-with-shake256
See .
Unsigned
  • Signature algorithm: unsigned
See .
SM2 With SM3
  • Signature algorithm: sm2-with-sm3
See .
Ed25519
  • Signature algorithm: ed25519
See .
Ed448
  • Signature algorithm: ed448
See .
ECDH PoP With SHA-256 And HMAC-SHA256
  • Signature algorithm: sa-ecdhPop-sha256-hmac-sha256
See .
ECDH PoP With SHA-384 And HMAC-SHA384
  • Signature algorithm: sa-ecdhPop-sha384-hmac-sha384
See .
ECDH PoP With SHA-512 And HMAC-SHA512
  • Signature algorithm: sa-ecdhPop-sha512-hmac-sha512
See .
RSASSA-PKCS1-v1_5 With SHA-256
  • Signature algorithm: sha256WithRSAEncryption
See .
RSASSA-PKCS1-v1_5 With SHA-384
  • Signature algorithm: sha384WithRSAEncryption
See .
RSASSA-PKCS1-v1_5 With SHA-512
  • Self-signed certificate
  • Signature algorithm: sha512WithRSAEncryption
Private Key See .
X.509 Certificate PEM content (467 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (306 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (306 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: 78 18 # [6]. subject=char[24] 20: 73656C667369676E2D7273612D776974 # "selfsign-rsa-wit" 36: 682D736861353132 # "h-sha512" 44: 00 # [7]. subjectPublicKeyAlg=0: RSA 45: 58 80 # [8]. subject public key=modulus=byte[128] 47: B8092F6F04726A921CFAB2D313AE9D2F01C7CE465FAB7DA62C7A5C73FA 76: CE5FFBA2F1DD80A29ADC43399CFCA22279B89A264810E5B926BB5E0D3F 105: 727A763E16013F89F8FEAC59D0FBDD5E8B0C52827E5490F13B84C3634E 134: 89C6D1731AE5F1A60F88ED118D080E1AB2CAA532D06C2F7D2A0874DEE4 163: E6B6E57283F6478DAF4253DB 175: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 176: 58 80 # [10]. signature value=byte[128] 178: B5D4C31502957FBEE2E4DED7E45E723A8B9A86A46E9FEA1D87817808D1 207: ACE802370B91718755F101FFB3B971816120BE5CC05D2EE866422D78EF 236: 7D16AA78CE4011E4DC92AE1C7DA3C7831773A44A7B2F5BAFED5D2B8A6A 265: 4E6E49638B3335DC68B596AE5FC48360E1C7DD50BD457CF2CFDCF56F98 294: BE1EA3103B12DD5B6221DB21 ]]>
RSASSA-PSS With SHA-256
  • Self-signed certificate
  • Signature algorithm: rsassa-pss-with-sha256
Private Key See .
X.509 Certificate PEM content (575 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (308 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (308 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: 78 1A # [6]. subject=char[26] 20: 73656C667369676E2D7273617373612D # "selfsign-rsassa-" 36: 7073732D736861323536 # "pss-sha256" 46: 00 # [7]. subjectPublicKeyAlg=0: RSA 47: 58 80 # [8]. subject public key=modulus=byte[128] 49: B8092F6F04726A921CFAB2D313AE9D2F01C7CE465FAB7DA62C7A5C73FA 78: CE5FFBA2F1DD80A29ADC43399CFCA22279B89A264810E5B926BB5E0D3F 107: 727A763E16013F89F8FEAC59D0FBDD5E8B0C52827E5490F13B84C3634E 136: 89C6D1731AE5F1A60F88ED118D080E1AB2CAA532D06C2F7D2A0874DEE4 165: E6B6E57283F6478DAF4253DB 177: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 178: 58 80 # [10]. signature value=byte[128] 180: 4D8FB6928B9C34EF6E53A22DE2BED6579A58FB990CED4C7CC5B0227CBB 209: 210741B3C3DA6A72CFA764CEF937DABC9C373776FD882ABBD052936D6B 238: 4A14A12E628AF43CA89A6CAAC11513AA9C4438C668447FFF7497F32BE4 267: 45B58A4EA2E40E30C32165558EFB66E2B17640B93B061BD8BF5812818B 296: 318415E9F20FFE5EA50C9D39 ]]>
RSASSA-PSS With SHA-384
  • Self-signed certificate
  • Signature algorithm: rsassa-pss-with-sha384
Private Key See .
X.509 Certificate PEM content (575 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (308 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (308 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: 78 1A # [6]. subject=char[26] 20: 73656C667369676E2D7273617373612D # "selfsign-rsassa-" 36: 7073732D736861333834 # "pss-sha384" 46: 00 # [7]. subjectPublicKeyAlg=0: RSA 47: 58 80 # [8]. subject public key=modulus=byte[128] 49: B8092F6F04726A921CFAB2D313AE9D2F01C7CE465FAB7DA62C7A5C73FA 78: CE5FFBA2F1DD80A29ADC43399CFCA22279B89A264810E5B926BB5E0D3F 107: 727A763E16013F89F8FEAC59D0FBDD5E8B0C52827E5490F13B84C3634E 136: 89C6D1731AE5F1A60F88ED118D080E1AB2CAA532D06C2F7D2A0874DEE4 165: E6B6E57283F6478DAF4253DB 177: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 178: 58 80 # [10]. signature value=byte[128] 180: 62E00951C6AC6536337911F5568E8FCB79440A0A7A59EA7EEFFC20CD8A 209: 85E2111502116A040D14A209602BCD8F635D9B91689429F8B43D35FC79 238: A4B3AE34824D41B56D9472513673F7D13B2F77B81992B205DDFF91088C 267: CDF03E85A7F07471EFF6549AF07A77BBAE313D1B909DDF2EC94C67E0F2 296: 0A342CC25CFFF87A820CE9DC ]]>
RSASSA-PSS With SHA-512
  • Self-signed certificate
  • RSA public key with 1536-bit modulus
  • Signature algorithm: rsassa-pss-with-sha512
Private Key
X.509 Certificate PEM content (703 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (436 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (436 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: 78 1A # [6]. subject=char[26] 20: 73656C667369676E2D7273617373612D # "selfsign-rsassa-" 36: 7073732D736861353132 # "pss-sha512" 46: 00 # [7]. subjectPublicKeyAlg=0: RSA 47: 58 C0 # [8]. subject public key=modulus=byte[192] 49: B511729186EDC01B2335EC7E46AB1CF3B31FB8D46133CE350588EFD85E 78: D0876568B7BE006CE3527ABA643A1B0F8FA5EC5402229630442CFCE305 107: 0804CB03FA99E5BC3F8D48B3EEA94B420C26F8DEC7B78E8580A79E29AE 136: A0DC9BDC5973F89D9B3DB7E8BBEB0BFD357CE710D9EF39E4AB628B8612 165: 85DB90939F0D2FD01D8E9BC9717CF4C4E42FB17DCC522C42A9FA000B05 194: FFFBA9E24EE64B991C1E01824A9D5AFDC37EA11C81AF2A1FA82BD58940 223: AD7D4DB61F8DC688C48A686C45B1065626D3 241: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 242: 58 C0 # [10]. signature value=byte[192] 244: A2218182F9D326F7A5164835FF9B2D24927A5277D9482AB0A729D4321D 273: 66365D58A0DFADDABB6D6D57FF358CFB090DFDFE12EA0D1FCA209808AA 302: FAD0DC4F24F1ACA12B364B6922B93DD574737BA10B77B1BFF69512C4A3 331: 5692C03565E19EB8F3123A3B07063783A08F9AB93FEDCEAB7C2295F472 360: 26D4B6ED536E71BB7E671DD9D9BCC9BF592353C9BCEFFC0B78BC1615F4 389: C53C6B8EF403B606E6D89A3458AA16C786609F353E40F8EB5BACDA815B 418: 1BDDA10132BC8642EBBF6FF5D9AB1A11D272 ]]>
RSASSA-PSS With SHAKE128
  • Self-signed certificate
  • Signature algorithm: rsassa-pss-with-shake128
Private Key See .
X.509 Certificate PEM content (469 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (310 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (310 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: 78 1C # [6]. subject=char[28] 20: 73656C667369676E2D7273617373612D # "selfsign-rsassa-" 36: 7073732D7368616B65313238 # "pss-shake128" 48: 00 # [7]. subjectPublicKeyAlg=0: RSA 49: 58 80 # [8]. subject public key=modulus=byte[128] 51: B8092F6F04726A921CFAB2D313AE9D2F01C7CE465FAB7DA62C7A5C73FA 80: CE5FFBA2F1DD80A29ADC43399CFCA22279B89A264810E5B926BB5E0D3F 109: 727A763E16013F89F8FEAC59D0FBDD5E8B0C52827E5490F13B84C3634E 138: 89C6D1731AE5F1A60F88ED118D080E1AB2CAA532D06C2F7D2A0874DEE4 167: E6B6E57283F6478DAF4253DB 179: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 180: 58 80 # [10]. signature value=byte[128] 182: 06B4F24DEFA5DC3C58E8C0B8E30A03C43A43A42B6EAD06458EE0FFB5EA 211: A443204DA030DFD19BCDCA2D5C0B4D6C848B5F9EC444C39CDF4C726388 240: 7D922AE17D8989A5F2046E6B4D2D9F114BA960DC55DFFFF775F9481F58 269: 0DAD43A984BAE37A650297C563C9AAA24CBFC3086BBCD6CAEE405E23ED 298: C9104DD16F653B47C9EB6B31 ]]>
RSASSA-PSS With SHAKE256
  • Self-signed certificate
  • Signature algorithm: rsassa-pss-with-shake256
Private Key See .
X.509 Certificate PEM content (597 bytes): Textual Representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (438 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certificate in . The only differences are the certificate type, the signature value, and the key identifiers.
C509 Type 2 Certificate Plain hex (438 bytes): Annotated hex: 8: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 13: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 18: 78 1C # [6]. subject=char[28] 20: 73656C667369676E2D7273617373612D # "selfsign-rsassa-" 36: 7073732D7368616B65323536 # "pss-shake256" 48: 00 # [7]. subjectPublicKeyAlg=0: RSA 49: 58 C0 # [8]. subject public key=modulus=byte[192] 51: B511729186EDC01B2335EC7E46AB1CF3B31FB8D46133CE350588EFD85E 80: D0876568B7BE006CE3527ABA643A1B0F8FA5EC5402229630442CFCE305 109: 0804CB03FA99E5BC3F8D48B3EEA94B420C26F8DEC7B78E8580A79E29AE 138: A0DC9BDC5973F89D9B3DB7E8BBEB0BFD357CE710D9EF39E4AB628B8612 167: 85DB90939F0D2FD01D8E9BC9717CF4C4E42FB17DCC522C42A9FA000B05 196: FFFBA9E24EE64B991C1E01824A9D5AFDC37EA11C81AF2A1FA82BD58940 225: AD7D4DB61F8DC688C48A686C45B1065626D3 243: 20 # [9]. extensions=-1, KeyUsage, critical: # [digitalSignature] 244: 58 C0 # [10]. signature value=byte[192] 246: 3C5A7DBA06D0918EB0397D881C60312E0668171E2644F9E30E05DC7623 275: 1AF177C8E1B460A763B31B7B869F2070602BB5749D627A7074973D4D49 304: ADF9A282C506101713DD246B92AD47D2A8A914891538670F8F38F32B4C 333: 39A87C5B4FF1DFBF7F00A6353F199F885EA95172C334B61335A46D9DE4 362: 93D2A1DB40B7CF7F39E6297D951CC35D459B911A591EF16511D9470C86 391: 1320B6559A138D1F4AE6B4FF8E493A3B9C5150B123FEB2FB84B5FDE60C 420: E4FBC5FA74E4E1B9CCDAA8F2A8D4CF574263 ]]>
Certificates With Different RDN Attributes
One RDN Attribute CommonName With EUI-48
  • Subject: a single RDN attribute, commonName, containing an EUI-48 value.
See .
One RDN Attribute CommonName With EUI-64
  • Subject: a single RDN attribute, commonName, containing an EUI-64 value.
See .
One RDN Attribute CommonName With Even Number Of Lowercase Hex Letters
  • Subject: a single RDN attribute, commonName, containing an even number of lowercase hexadecimal characters.
See .
One RDN Attribute CommonName With Other Text
  • Subject: a single RDN attribute, commonName, containing text other than an EUI-48 value, an EUI-64 value, or an even number of lowercase hexadecimal characters.
See .
Empty Subject
  • Subject: empty.
See .
Subject With RDN Attribute Business Category
  • Subject: includes the RDN attribute businessCategory.
See .
Subject With RDN Attribute Country
  • Subject: includes the RDN attribute countryName.
See .
Subject With RDN Attribute Directory Management Domain Name
  • Subject: includes the RDN attribute directoryManagementDomainName.
See .
Subject With RDN Attribute DN Qualifier
  • Subject: includes the RDN attribute dnQualifier.
See .
Subject With RDN Attribute Domain Component
  • Subject: includes the RDN attribute domainComponent.
See .
Subject With RDN Attribute Email Address
  • Subject: includes the RDN attribute emailAddress.
See .
Subject With RDN Attribute Generation Qualifier
  • Subject: includes the RDN attribute generationQualifier.
See .
Subject With RDN Attribute Given Name
  • Subject: includes the RDN attribute givenName.
See .
Subject With RDN Attribute Initials
  • Subject: includes the RDN attribute initials.
See .
Subject With RDN Attribute Jurisdiction Country
  • Subject: includes the RDN attribute jurisdictionCountryName.
See .
Subject With RDN Attribute Jurisdiction Locality
  • Subject: includes the RDN attribute jurisdictionLocalityName.
See .
Subject With RDN Attribute Jurisdiction State Or Province
  • Subject: includes the RDN attribute jurisdictionStateOrProvinceName.
See .
Subject With RDN Attribute Locality
  • Subject: includes the RDN attribute localityName.
See .
Subject With RDN Attribute Name
  • Subject: includes the RDN attribute name.
See .
Subject With RDN Attribute Organization
  • Subject: includes the RDN attribute organizationName.
See .
Subject With RDN Attribute Organizational Unit
  • Subject: includes the RDN attribute organizationalUnitName.
See .
Subject With RDN Attribute Organization Identifier
  • Subject: includes the RDN attribute organizationIdentifier.
See .
Subject With RDN Attribute Postal Code
  • Subject: includes the RDN attribute postalCode.
See .
Subject With RDN Attribute Pseudonym
  • Subject: includes the RDN attribute pseudonym.
See .
Subject With RDN Attribute Serial Number
  • Subject: includes the RDN attribute serialNumber.
See .
Subject With RDN Attribute State
  • Subject: includes the RDN attribute stateOrProvinceName.
See .
Subject With RDN Attribute Street
  • Subject: includes the RDN attribute street.
See .
Subject With RDN Attribute Surname
  • Subject: includes the RDN attribute surname.
See .
Subject With RDN Attribute Telephone Number
  • Subject: includes the RDN attribute telephoneNumber.
See .
Subject With RDN Attribute Title
  • Subject: includes the RDN attribute title.
See .
Subject With RDN Attribute Unstructured Address
  • Subject: includes the RDN attribute unstructuredAddress.
See .
Subject With RDN Attribute Unstructured Name
  • Subject: includes the RDN attribute unstructuredName.
See .
Subject With RDN Attribute User Id
  • Subject: includes the RDN attribute userId.
See .
Certificates With Different Extensions
Empty Extensions
  • Extensions: none
Not applicable to certificates; see for examples in certification requests.
One Extension: Non-Critical keyUsage
  • Extensions: a single non-critical keyUsage extension
See .
One Extension: Critical keyUsage
  • Extensions: a single critical keyUsage extension
See .
Authority Information Access See .
Authority Key Identifier
  • With only the keyIdentifier field present See .
  • With all fields present See .
ASIdentifiers And ASIdentifiers V2
  • ASIdentifiers set to null
  • A non-empty array of ASIdOrRange
See .
Basic Constraints
  • CA = true and pathLenConstraint absent See .
  • CA = true and pathLenConstraint present See .
  • CA = false See .
Certificate Policies See .
CRL Distribution Points and Freshest CRL See .
Extended Key Usage
  • Integer-identified usages See .
  • ~oid-identified usages See .
  • Integer-identified and ~oid-identified usages See .
Inhibit anyPolicy See .
Issuer Alternative Name See .
IPAddrBlocks and IPAddrBlocks V2
  • With SAFI = null and IP Address Choice = null
  • With SAFI = null and IP Address Choice = null See .
  • IPAddrBlocks with non-null SAFI and IntIPAddressChoice`
  • IPAddrBlocks V2 with non-null SAFI, IntIPAddressChoice and IPAddressChoice See .
Name Constraints
  • Only PermittedSubTree See .
  • Only ExcludedSubTree See .
  • Both PermittedSubTree and ExcludedSubTree See .
OCSP No Check See .
Policy Constraints
  • Only RequireExplicitPolicy See .
  • Only InhibitPolicyMapping See .
  • Both RequireExplicitPolicy and InhibitPolicyMapping See .
Policy Mappings See .
Subject Alternative Name See .
Subject Directory Attributes See .
Subject Information Access See .
Subject Key Identifier See .
TLS Features See .
X.509 Certificate With Unconvertible RDN Attributes And Extensions
  • Common Name: text encoded in a string type other than PrintableString or UTF8String.
  • Subject Public Key Algorithm: an EC public key with an unknown curve OID in the parameters field.
  • ASIdentifiers: includes the rdi field.
  • Name Constraints: includes a DirectoryName option encoded as IA5String.
Private Key See .
X.509 Certificate PEM content (387 bytes) Textual Representation: Text representation:
C509 Type 3 Certificate
  • C509 type 3 certificate converted from the X.509 certificate in .
Plain hex (257 bytes): Annotated hex: 6: 1A 6775D700 # [4]. notBefore=1735776000: # 2025-01-02T00:00:00Z 11: 1A 69570A80 # [5]. notAfter=1767312000: # 2026-01-02T00:00:00Z 16: 82 # [6]. subject=array[2], 1 attribute #---attribute[0]--- 17: 43 # type=byte[3]: 18: 550403 # oid: 2.5.4.3 (commonName) 21: 58 19 # value=byte[25] 23: 1617416E20494135537472696E6720436F6D6D6F6E4E616D65 48: 82 # [7]. subjectPublicKeyAlg=array[2] 49: 47 # algorithm=byte[7]: 50: 2A8648CE3D0201 # oid: 1.2.840.10045.2.1 57: 4B # parameters=byte[11] 58: 06092B0601040181FD5905 69: 58 41 # [8]. subject public key=byte[65] 71: 04F413596A87125995B4E0D8B7BEFBC4D6EDB11F61AF08AB32408D4FF9 100: F9078DDBAB3635AFD496D5656A22EFDC3D59C4482A99836BB358FBF4CA 129: 78D3930436C857 136: 84 # [9]. extensions=array[4] #---extension[0]--- 137: 48 # type=byte[8]: 138: 2B06010505070108 # oid: 1.3.6.1.5.5.7.1.8 # (ASIdentifiers) 146: 46 # value=byte[6] 147: 3004A1020500 #---extension[1]--- 153: 18 1A # type=26: NameConstraints 155: 82 # value=array[2] 156: 82 # permittedSubtrees=array[2] #---GeneralName[0]--- 157: 04 # GeneralNameType=4: directoryName 158: 82 # GeneralNameValue=array[2], 1 attribute #---attribute[0]--- 159: 43 # type=byte[3]: 160: 550403 # oid: 2.5.4.3 (commonName) 163: 58 19 # value=byte[25] 165: 1617416E20494135537472696E6720436F6D6D6F6E4E616D65 190: F6 # excludedSubtrees= 191: 58 40 # [10]. signature value=byte[64] 193: 8A25E8AABBA4B19B8E0D1596A476C2C42F5068F5F3457606806E2F284A 222: 22E6E74F787D4E04FE4B62DEDDA880077DC9CB2A5D7A1D8ED62309CD46 251: 7E61854DC30A ]]>
Certification Requests With Different Signature Algorithms
ECDSA With SHA256
  • Signature algorithm: ecdsa-with-sha256
  • CR attributes: one extensionRequest attribute.
Private Key See .
X.509 Certification Request PEM content (248 bytes): Text representation:
C509 Type 3 Certification Request
  • C509 type 3 certification request converted from the X.509 certification request in .
Plain hex (160 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certification request in . The only differences are the certification request type and the signature value.
C509 Type 2 Certification Request Plain hex (160 bytes): Annotated hex:
ECDSA With SHA384
  • Signature algorithm: ecdsa-with-sha384
  • CR attributes: one challengePassword attribute with a PrintableString value.
Private Key See .
X.509 Certification Request PEM content (300 bytes): Text representation:
C509 Type 3 Certification Request
  • C509 type 3 certification request converted from the X.509 certification request in .
Plain hex (228 bytes): Annotated hex:
C509 Type 2 Certification Request A PrintableString challengePassword value is not supported in a type 2 certification request.
ECDH PoP With SHA-256 And HMAC-SHA256
  • Signature algorithm: sa-ecdhPop-sha256-hmac-sha256
  • Signature value: only the hashValue field is present.
  • CR attributes: one challengePassword attribute with a UTF8String value.
Private Key
X.509 Certification Request
  • The peer private key and certificate are given in and .
PEM content (206 bytes): Text representation:
C509 Type 3 Certification Request
  • C509 type 3 certification request converted from the X.509 certification request in .
Plain hex (132 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certification request in . The only differences are the certification request type and the signature value.
C509 Type 2 Certification Request
  • The peer private key and certificate are given in and .
Plain hex (132 bytes): Annotated hex:
ECDH PoP With SHA-384 And HMAC-SHA384
  • Signature algorithm: sa-ecdhPop-sha384-hmac-sha384
  • Signature value: all fields are present.
  • CR attributes: none.
Private Key
X.509 Certification Request
  • The peer private key and certificate are given in and .
PEM content (261 bytes): Text representation:
C509 Type 3 Certification Request
  • C509 type 3 certification request converted from the X.509 certification request in .
Plain hex (190 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certification request in . The only differences are the certification request type and the signature value.
C509 Type 2 Certification Request
  • The peer private key and certificate are given in and .
Plain hex (190 bytes): Annotated hex:
ECDH PoP With SHA-512 And HMAC-SHA512
  • Signature algorithm: sa-ecdhPop-sha512-hmac-sha512
  • Signature value: only the hashValue field is present.
  • CR attributes: none.
Private Key
X.509 Certification Request
  • The peer private key and certificate are given in and .
PEM content (278 bytes): Text representation:
C509 Type 3 Certification Request
  • C509 type 3 certification request converted from the X.509 certification request in .
Plain hex (219 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certification request in . The only differences are the certification request type and the signature value.
C509 Type 2 Certification Request
  • The peer private key and certificate are given in and .
Plain hex (219 bytes): Annotated hex:
Unsigned PoP With X25519 Key
  • Signature algorithm: unsigned
  • CR attributes: a privateKeyPossessionStatement attribute without the cert field.
Private Key
X.509 Certification Request PEM content (135 bytes): Text representation: ]]>
C509 Type 3 Certification Request
  • C509 type 3 certification request converted from the X.509 certification request in .
Plain hex (64 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certification request in . The only differences are the certification request type and the signature value.
C509 Type 2 Certification Request Plain hex (64 bytes): Annotated hex: 63: 40 # [6]. signature value=byte[0] ]]>
Unsigned PoP With X25519 Key And Cert
  • Signature algorithm: unsigned
  • CR attributes: a privateKeyPossessionStatement attribute with the cert field.
Private Key
X.509 Certification Request PEM content (433 bytes): Text representation: ]]>
C509 Type 3 Certification Request
  • C509 type 3 certification request converted from the X.509 certification request in .
Plain hex (230 bytes): Annotated hex:
  • See the annotated hex for the C509 type 2 certification request in . The only differences are the certification request type and the signature value.
C509 Type 2 Certification Request Plain hex (230 bytes): Annotated hex:
Certification Requests With Different CR Attributes
With Empty CR Attributes
  • CR attributes: none.
See and .
With challengePassword Attribute
  • CR attributes: one challengePassword attribute of type UTF8String.
See .
  • CR attributes: one challengePassword attribute of type PrintableString.
See .
With extensionRequest Attribute
  • CR attributes: one extensionRequest attribute.
See .
With privateKeyPossessionStatement Attribute
  • CR attributes: one privateKeyPossessionStatement attribute without the cert field.
See .
  • CR attributes: one privateKeyPossessionStatement attribute with the cert field.
See .
Certification Request Templates
All Fields Set to "undefined" Where Possible
  • c509CertificationRequestType: undefined
  • subjectSignatureAlgorithm: undefined
  • subject: undefined
  • subjectPublicKeyAlgorithm: undefined
  • subjectPublicKey: undefined
  • extensionsRequest: undefined
Plain hex (8 bytes): Annotated hex: 3: F7 # [2]. subjectSignatureAlgorithm= 4: F7 # [3]. subject= 5: F7 # [4]. subjectPublicKeyAlgorithm= 6: F7 # [5]. subjectPublicKey= 7: F7 # [6]. extensions= ]]>
With One Element in Each Field
  • c509CertificationRequestType: one element
  • subjectSignatureAlgorithm: one element
  • subject: one element
  • subjectPublicKeyAlgorithm: one element
  • extensionsRequest: one element
Plain hex (18 bytes): Annotated hex: 11: 81 # [4]. subjectPublicKeyAlgorithm=array[1] 12: 01 # [0]=1: EC public key on curve secp256r1 13: F7 # [5]. subjectPublicKey= 14: 83 # [6]. extensions=array[3] #---extension[0]--- 15: 03 # type=3: SubjectAlternativeName 16: F4 # required 17: F7 # value= ]]>
Complex Template
  • c509CertificationRequestType: multiple values
  • subjectSignatureAlgorithm: all choices
  • subjectPublicKeyAlgorithm: all choices
  • subject
    • choice (int, Defined)
    • choice (int, undefined)
    • choice (~oid, Defined)
    • choice (~oid, undefined)
  • extensions
    • choice (int, Defined)
    • choice (int, undefined)
    • choice (~oid, Defined)
    • choice (~oid, undefined)
Plain hex (153 bytes): Annotated hex: #---attribute[1]--- 36: 04 # type=4: country 37: 01 # minOccurs=1 38: 01 # maxOccurs=1 39: 62 # value=char[2] 40: 4445 # "DE" #---attribute[2]--- 42: 49 # type=byte[9]: 43: 2B0601040181FD590B # oid: 1.3.6.1.4.1.32473.11 52: 01 # minOccurs=1 53: 01 # maxOccurs=1 54: F7 # value= #---attribute[3]--- 55: 49 # type=byte[9]: 56: 2B0601040181FD590C # oid: 1.3.6.1.4.1.32473.12 65: 01 # minOccurs=1 66: 01 # maxOccurs=1 67: 4D # value=byte[13] 68: 0C0B636F6E73742D76616C7565 81: 83 # [4]. subjectPublicKeyAlgorithm=array[3] 82: 01 # [0]=1: EC public key on curve secp256r1 83: 49 # [1]=byte[9]: 84: 2B0601040181FD5909 # oid: 1.3.6.1.4.1.32473.9 93: 82 # [2]=array[2] 94: 49 # algorithm=byte[9]: 95: 2B0601040181FD590A # oid: 1.3.6.1.4.1.32473.10 104: 42 # parameters=byte[2] 105: 0500 107: F7 # [5]. subjectPublicKey= 108: 8C # [6]. extensions=array[12] #---extension[0]--- 109: 08 # type=8: ExtendedKeyUsage 110: F4 # required 111: F7 # value= #---extension[1]--- 112: 02 # type=2: KeyUsage 113: F5 # optional 114: 18 60 # value=96: [keyCertSign, cRLSign] #---extension[2]--- 116: 49 # type=byte[9]: 117: 2B0601040181FD590D # oid: 1.3.6.1.4.1.32473.13 126: F4 # required 127: F7 # value= #---extension[3]--- 128: 49 # type=byte[9]: 129: 2B0601040181FD590E # oid: 1.3.6.1.4.1.32473.14 138: F4 # required 139: 4D # value=byte[13] 140: 0C0B636F6E73742D76616C7565 ]]>
Security Considerations The private keys shown in this document are for example purposes only. They are not secret and MUST NOT be used in deployments. The examples use 1024-bit or 1536-bit RSA keys and reuse key pairs to keep the examples compact. In deployments, key pairs are expected to be generated uniquely and not reused. The examples also use RSA PKCS#1 v1.5 signatures and SHA-1 to cover all signature algorithms defined in . These choices do not reflect current state-of-the-art security recommendations; at the time of writing, RSA keys of at least 3072 bits, stronger hash functions, and RSA-PSS are required for adequate security.
Privacy Considerations There are no privacy considerations.
IANA Considerations There are no IANA considerations.
Normative References Key words for use in RFCs to Indicate Requirement Levels In many standards track documents several words are used to signify the requirements in the specification. These words are often capitalized. This document defines these words as they should be interpreted in IETF documents. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements. Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words RFC 2119 specifies common key words that may be used in protocol specifications. This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the defined special meanings. Concise Binary Object Representation (CBOR) The Concise Binary Object Representation (CBOR) is a data format whose design goals include the possibility of extremely small code size, fairly small message size, and extensibility without the need for version negotiation. These design goals make it different from earlier binary serializations such as ASN.1 and MessagePack. This document obsoletes RFC 7049, providing editorial improvements, new details, and errata fixes while keeping full compatibility with the interchange format of RFC 7049. It does not create a new version of the format. Concise Binary Object Representation (CBOR) Tags for Object Identifiers The Concise Binary Object Representation (CBOR), defined in RFC 8949, is a data format whose design goals include the possibility of extremely small code size, fairly small message size, and extensibility without the need for version negotiation. This document defines CBOR tags for object identifiers (OIDs) and is the reference document for the IANA registration of the CBOR tags so defined. CBOR Encoded X.509 Certificates (C509 Certificates) Ericsson AB Ericsson AB University of Glasgow RISE AB IN Groupe NIO This document specifies a CBOR encoding of X.509 certificates. The resulting certificates are called C509 certificates. The CBOR encoding supports a large subset of RFC 5280 and common certificate profiles, and it is extensible. Two types of C509 certificates are defined. One type is an invertible CBOR re-encoding of DER-encoded X.509 certificates with the signature field copied from the DER encoding. The other type is identical except that the signature is computed over the CBOR encoding instead of the DER encoding, thereby avoiding the use of ASN.1. Both types of certificates have the same semantics as X.509 while providing comparable size reduction. This document also specifies CBOR-encoded data structures for certification requests and certification request templates, new COSE headers, as well as a TLS certificate type and a file format for C509. This document updates RFC 6698 by extending the TLSA selectors registry to include C509 certificates.
Acknowledgments The authors thank Marco Tiloca for reviewing and commenting on intermediate versions of the draft.
Change log
  • Note to RFC Editor: Please remove this section prior to publication of the final version of this document.
Since draft-ietf-cose-c509-test-vectors-01
  • Align with draft-ietf-cose-cbor-encoded-cert-20
  • Add the leading byte for CBOR array
    • 0x8B for C509Certificate
    • 0x87 for C509CertificationRequest
    • 0x87 for C509CertificationRequestTemplate
  • Better indention for extensions, RDN attributes, CR attributes, certificate policies, etc.
  • Fixed examples
    • Section 3.6: replace the empty subject of the self-signed certificate with non-empty one.
    • Section 3.12 and Section 3.13: replace empty signature value in non-selfsigned certificate with non-empty one.