prakash babu wrote:

> *eg )   V  051213070133Z  B3500880020644B6  unknown
> /C=IN/ST=TamilNadu/O=cbe/CN=test*
> ** 
> *where:*
>  V                             - Certificate is Valid  (R for revoked
> certificates )

and E for expired.

>  051213070133Z         - Date upto which the certificate is valid
>  B3500880020644B6  - Serial number of the certificate
>  /C=IN/ST=TamilNadu/O=cbe/CN=test - subject of the certificate

If a certificate is revoked, there is another
field with the date of revocation, so a revoked
entry looks like this:

R       060920165425Z   050315152021Z   0B      unknown 
/C=US/O=Organization/CN=Name

In the other cases (Valid and Expired), there is still an empty
field in this (so between the expiry date and the serial number
there are two tabulators). So the format is:

E|R|V<tab>Expiry<tab>[RevocationDate]<tab>Serial<tab>unknown<tab>SubjectDN

Cheers, Olaf

-- 
Dipl.Inform. Olaf Gellert                  PRESECURE (R)
Senior Researcher,                       Consulting GmbH
Phone: (+49) 0700 / PRESECURE           [EMAIL PROTECTED]

                        A daily view on Internet Attacks
                        https://www.ecsirt.net/sensornet

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to