Hi to all, Our root certificate is expired!!! We are unable to generate a VALID root certificate. Comparison HTML view is attached. You can see certain fields differences between them. Like;
*Serial Number is zero ?!?!
X509v3 Basic Constraints: *
*CA:TRUE* * (The new one is FALSE does it matter?)*
*
keyid structure is diffrent
*
First certificate is valid but it is expired! The other one is not valid.
How can I generate a *VALID certificate*???
Text CompareProduced: 17.01.2009 20:49:25
Mode: All
Left file: C:\Documents and Settings\Administrator\Desktop\cacert3.crt
Right file: C:\Documents and Settings\Administrator\Desktop\cacert5.crt
| Certificate: | = | Certificate: |
| Data: | Data: | |
| Version: 3 (0x2) | Version: 3 (0x2) | |
| Serial Number: | <> | Serial Number: 0 (0x0) |
| d5:11:3b:f9:71:87:06:8d | ||
| Signature Algorithm: sha1WithRSAEncryption | = | Signature Algorithm: sha1WithRSAEncryption |
| Issuer: C=TR, ST=NA, O=Sakarya Universitesi, OU=IHSM, CN=dot1x.sakarya.edu.tr/emailaddress=i...@sakarya.edu.tr | <> | Issuer: C=TR, ST=NA, O=Sakarya Universitesi, CN=dot1x.sakarya.edu.tr/emailaddress=i...@sakarya.edu.tr |
| Validity | = | Validity |
| Not Before: Jan 15 21:33:14 2008 GMT | <> | Not Before: Jan 17 15:47:53 2009 GMT |
| Not After : Jan 14 21:33:14 2011 GMT | Not After : Jan 17 15:47:53 2012 GMT | |
| Subject: C=TR, ST=NA, O=Sakarya Universitesi, OU=IHSM, CN=dot1x.sakarya.edu.tr/emailaddress=i...@sakarya.edu.tr | Subject: C=TR, ST=NA, O=Sakarya Universitesi, CN=dot1x.sakarya.edu.tr/emailaddress=i...@sakarya.edu.tr | |
| Subject Public Key Info: | = | Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption | Public Key Algorithm: rsaEncryption | |
| RSA Public Key: (1024 bit) | RSA Public Key: (1024 bit) | |
| Modulus (1024 bit): | Modulus (1024 bit): | |
| 00:da:26:ee:e1:f0:41:8f:03:04:57:79:c9:ad:26: | <> | 00:c5:47:41:78:f6:ed:0b:47:58:4b:4e:54:1c:c8: |
| bf:96:da:e3:1e:92:6d:96:ca:aa:3e:5d:92:64:2a: | f9:fa:3a:1c:f5:bb:29:9c:3e:1c:75:81:2b:d7:08: | |
| 61:85:c4:8a:f2:3e:d8:b6:ec:59:59:90:1f:bf:d6: | de:68:53:ba:37:5c:64:aa:d4:13:21:f1:7e:e3:bb: | |
| 13:90:2c:49:dd:6c:ff:a2:ef:c1:80:91:6e:28:b0: | 02:2d:68:f2:66:cb:d7:14:6b:81:cf:e1:21:17:0f: | |
| cc:86:94:69:d1:92:b4:30:a6:bd:7d:2c:df:6a:92: | 81:04:e3:08:b4:01:a2:6c:fd:a8:e9:98:c2:3e:19: | |
| dd:63:9b:63:a1:40:d6:23:df:60:5e:f7:90:df:0f: | 1c:a0:05:4c:0b:37:6a:db:72:16:90:6e:2c:d0:5a: | |
| 0d:56:61:02:f1:3a:eb:16:95:6c:8f:ca:79:8a:39: | 5a:11:3e:98:fd:39:0e:96:4f:92:bf:5a:42:cb:fe: | |
| e3:36:f8:bc:e6:85:e3:44:c4:d5:d8:16:27:e3:6c: | 00:3a:b3:90:d0:16:95:bd:a9:3a:b5:2c:c7:d1:a3: | |
| d2:8b:8f:65:e3:a4:87:31:0d | 82:a7:8e:8f:01:f2:8a:ed:95 | |
| Exponent: 65537 (0x10001) | = | Exponent: 65537 (0x10001) |
| X509v3 extensions: | X509v3 extensions: | |
| -+ | X509v3 Basic Constraints: | |
| CA:FALSE | ||
| Netscape Comment: | ||
| OpenSSL Generated Certificate | ||
| X509v3 Subject Key Identifier: | = | X509v3 Subject Key Identifier: |
| 7B:4C:B3:74:82:82:FC:9F:CD:34:B1:43:9B:BD:7E:F1:50:38:BF:D8 | <> | 42:9D:41:BB:4C:38:27:CC:39:A8:76:70:92:C3:8F:E9:51:78:E6:24 |
| X509v3 Authority Key Identifier: | = | X509v3 Authority Key Identifier: |
| keyid:7B:4C:B3:74:82:82:FC:9F:CD:34:B1:43:9B:BD:7E:F1:50:38:BF:D8 | <> | keyid:42:9D:41:BB:4C:38:27:CC:39:A8:76:70:92:C3:8F:E9:51:78:E6:24 |
| DirName:/C=TR/ST=NA/O=Sakarya Universitesi/OU=IHSM/CN=dot1x.sakarya.edu.tr/emailaddress=i...@sakarya.edu.tr | ||
| serial:D5:11:3B:F9:71:87:06:8D | ||
| = | ||
| X509v3 Basic Constraints: | +- | |
| CA:TRUE | ||
| Signature Algorithm: sha1WithRSAEncryption | = | Signature Algorithm: sha1WithRSAEncryption |
| ca:9c:d7:07:28:d3:bb:37:fa:57:59:cc:c8:aa:f7:9b:24:c4: | <> | bc:17:86:06:d1:da:96:76:b5:63:50:8d:0c:44:9e:40:30:d5: |
| a3:9f:aa:da:a3:5c:d4:2b:6d:24:e6:b0:42:0e:03:77:98:63: | 9e:94:e9:94:36:79:d3:e3:c2:64:8f:7f:25:f2:44:2b:39:d7: | |
| 35:ec:7b:f4:f6:37:3f:98:58:17:7b:bd:75:c0:05:f1:8a:9a: | 1c:e3:3d:e1:82:9c:48:39:11:8f:fc:eb:3e:e4:f6:46:92:0c: | |
| 26:94:b6:d9:58:d8:e2:66:42:a9:f9:10:f7:2e:20:d5:3e:14: | 90:fc:91:e6:ea:6e:2f:5c:4c:2e:f5:ce:c3:61:5a:c4:e9:b4: | |
| ff:4b:d2:d9:92:cf:8f:95:94:64:bf:49:78:51:d0:fd:43:34: | ce:20:e6:06:b7:b9:cc:0b:42:fc:6a:36:e2:ea:03:7b:8e:5d: | |
| ac:aa:af:c9:4c:72:69:22:e2:59:05:6b:c5:27:ac:23:cd:f8: | e5:c7:b1:1d:4b:fc:62:71:aa:fe:a7:04:00:f0:c3:9d:6e:34: | |
| 99:f3:9c:1c:a8:03:45:d4:2b:6e:bd:82:99:36:f9:19:14:31: | 56:96:18:e1:04:e5:ea:73:c8:eb:ae:a7:c3:1f:ac:77:30:80: | |
| d8:65 | 87:54 | |
| -----BEGIN CERTIFICATE----- | = | -----BEGIN CERTIFICATE----- |
| MIIDijCCAvOgAwIBAgIJANURO/lxhwaNMA0GCSqGSIb3DQEBBQUAMIGLMQswCQYD | <> | MIIC6TCCAlKgAwIBAgIBADANBgkqhkiG9w0BAQUFADB8MQswCQYDVQQGEwJUUjEL |
| VQQGEwJUUjELMAkGA1UECBMCTkExHTAbBgNVBAoTFFNha2FyeWEgVW5pdmVyc2l0 | MAkGA1UECBMCTkExHTAbBgNVBAoTFFNha2FyeWEgVW5pdmVyc2l0ZXNpMR0wGwYD | |
| ZXNpMQ0wCwYDVQQLEwRJSFNNMR0wGwYDVQQDExRkb3QxeC5zYWthcnlhLmVkdS50 | ||
| cjEiMCAGCSqGSIb3DQEJARYTaWhzbUBzYWthcnlhLmVkdS50cjAeFw0wODAxMTUy | ||
| MTMzMTRaFw0xMTAxMTQyMTMzMTRaMIGLMQswCQYDVQQGEwJUUjELMAkGA1UECBMC | ||
| TkExHTAbBgNVBAoTFFNha2FyeWEgVW5pdmVyc2l0ZXNpMQ0wCwYDVQQLEwRJSFNN | ||
| MR0wGwYDVQQDExRkb3QxeC5zYWthcnlhLmVkdS50cjEiMCAGCSqGSIb3DQEJARYT | VQQDExRkb3QxeC5zYWthcnlhLmVkdS50cjEiMCAGCSqGSIb3DQEJARYTaWhzbUBz | |
| aWhzbUBzYWthcnlhLmVkdS50cjCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA | YWthcnlhLmVkdS50cjAeFw0wOTAxMTcxNTQ3NTNaFw0xMjAxMTcxNTQ3NTNaMHwx | |
| 2ibu4fBBjwMEV3nJrSa/ltrjHpJtlsqqPl2SZCphhcSK8j7YtuxZWZAfv9YTkCxJ | ||
| 3Wz/ou/BgJFuKLDMhpRp0ZK0MKa9fSzfapLdY5tjoUDWI99gXveQ3w8NVmEC8Trr | ||
| FpVsj8p5ijnjNvi85oXjRMTV2BYn42zSi49l46SHMQ0CAwEAAaOB8zCB8DAdBgNV | ||
| HQ4EFgQUe0yzdIKC/J/NNLFDm71+8VA4v9gwgcAGA1UdIwSBuDCBtYAUe0yzdIKC | ||
| /J/NNLFDm71+8VA4v9ihgZGkgY4wgYsxCzAJBgNVBAYTAlRSMQswCQYDVQQIEwJO | ||
| QTEdMBsGA1UEChMUU2FrYXJ5YSBVbml2ZXJzaXRlc2kxDTALBgNVBAsTBElIU00x | CzAJBgNVBAYTAlRSMQswCQYDVQQIEwJOQTEdMBsGA1UEChMUU2FrYXJ5YSBVbml2 | |
| HTAbBgNVBAMTFGRvdDF4LnNha2FyeWEuZWR1LnRyMSIwIAYJKoZIhvcNAQkBFhNp | ZXJzaXRlc2kxHTAbBgNVBAMTFGRvdDF4LnNha2FyeWEuZWR1LnRyMSIwIAYJKoZI | |
| aHNtQHNha2FyeWEuZWR1LnRyggkA1RE7+XGHBo0wDAYDVR0TBAUwAwEB/zANBgkq | hvcNAQkBFhNpaHNtQHNha2FyeWEuZWR1LnRyMIGfMA0GCSqGSIb3DQEBAQUAA4GN | |
| hkiG9w0BAQUFAAOBgQDKnNcHKNO7N/pXWczIqvebJMSjn6rao1zUK20k5rBCDgN3 | ADCBiQKBgQDFR0F49u0LR1hLTlQcyPn6Ohz1uymcPhx1gSvXCN5oU7o3XGSq1BMh | |
| mGM17Hv09jc/mFgXe711wAXxipomlLbZWNjiZkKp+RD3LiDVPhT/S9LZks+PlZRk | 8X7juwItaPJmy9cUa4HP4SEXD4EE4wi0AaJs/ajpmMI+GRygBUwLN2rbchaQbizQ | |
| v0l4UdD9QzSsqq/JTHJpIuJZBWvFJ6wjzfiZ85wcqANF1CtuvYKZNvkZFDHYZQ== | WloRPpj9OQ6WT5K/WkLL/gA6s5DQFpW9qTq1LMfRo4Knjo8B8ortlQIDAQABo3sw | |
| eTAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBD | ||
| ZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUQp1Bu0w4J8w5qHZwksOP6VF45iQwHwYDVR0j | ||
| BBgwFoAUQp1Bu0w4J8w5qHZwksOP6VF45iQwDQYJKoZIhvcNAQEFBQADgYEAvBeG | ||
| BtHalna1Y1CNDESeQDDVnpTplDZ50+PCZI9/JfJEKznXHOM94YKcSDkRj/zrPuT2 | ||
| RpIMkPyR5upuL1xMLvXOw2FaxOm0ziDmBre5zAtC/Go24uoDe45d5cexHUv8YnGq | ||
| /qcEAPDDnW40VpYY4QTl6nPI666nwx+sdzCAh1Q= | ||
| -----END CERTIFICATE----- | = | -----END CERTIFICATE----- |
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
