>Does anyone have an example of MS or NS SGC certificates they can send me?
I'd
>really like to know what one of these things looks like, I know what the
>(documented) cert extensions are to enable SGC but I'd like to see what
else is
>in there alongside them, and who signs them.
I got one from: zvinet.creditanstalt.co.at
Maybe it is the Extended key usage field (2.5.29.37) I am just implementing.
Wolfgang
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Version: 3
Serial number: 125715976700222246817281364255723083425
Signature algorithm: md5WithRSAEncryption
Issuer:
O: VeriSign Trust Network,
OU: VeriSign, Inc.,
OU: VeriSign International Server CA - Class 3,
OU: www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign
Valid not before: Mon Jan 19 00:00:00 GMT+00:00 1998
not after: Tue Jan 19 23:59:59 GMT+00:00 1999
Subject:
C: AT,
SP: Vienna,
L: Julius Tandler Platz 3,
O: Creditanstalt AG,
OU: OZV,
CN: zvinet.creditanstalt.co.at
public exponent: 10001
modulus:
766cd2eebb42ba92907e7002df13c5afd93e7b2b324ca7d0f9d3aa31d7e189ac4cf92f088329
63c6a5f847b7912065da66b394a5ed638a9b9e4d62167ec
e9aab04c49934b0ec0c88373afc1c5cc7eaf914fdc5b79f2ebc8cfe2f5ad995e3e6e7bb37013
fdc2bdcbe411b443bb355678326f1e72a47f68df6082850a7ad377cd
d
Extension: 1 not critical NetscapeCertType
NetscapeCertType: SSL Server
Extension: 2 not critical 2.5.29.3
UnkownExtension: ObjectID = 2.5.29.3
Extension: 3 not critical BasicConstraints
CA: no
Extension: 4 not critical 2.5.29.37
UnkownExtension: ObjectID = 2.5.29.37
--
Dipl.-Ing. Wolfgang Platzer
Technische Universitaet Graz - University of Technology Graz
Institut f�r Angewandte Informationsverarbeitung
und Kommunikationstechnologien
Klosterwiesgasse 32/I, A-8010 Graz,
Tel: ++43 316 873-5527,Fax: ++43 316 873-5520
URL <http://www.iaik.tu-graz.ac.at/index.html>
+-------------------------------------------------------------------------+
| Administrative requests should be sent to [EMAIL PROTECTED] |
| List service provided by Open Software Associates, http://www.osa.com/ |
+-------------------------------------------------------------------------+