Cryptography Tutorials - Herong's Tutorial Examples - v5.42, by Herong Yang
"keytool" Viewing Certificates in DER and PEM
This section provides a tutorial example on how to use 'keytool' to view certificates in DER and PEM formats generated by 'OpenSSL'.
One way to verify the certificate in DER and PEM formats generated by "OpenSSL" is to view it with the "keytool -printcert" command:
herong> keytool -printcert -file openssl_crt.pem Owner: EMAILADDRESS=herongyang.com, CN=Herong Yang, OU=HY Unit, ... Issuer: EMAILADDRESS=herongyang.com, CN=Herong Yang, OU=HY Unit, ... Serial number: 0 Valid from: Sun Apr 1 13:02:22 EDT 2007 until: ... Certificate fingerprints: MD5: BF:B8:3A:19:E5:05:CE:CA:8C:F7:05:FA:FE:51:A6:EC SHA1: F7:C7:2A:57:73:5E:CE:E5:73:09:13:35:FB:91:CF:27:... Signature algorithm name: MD5withRSA Version: 3 Extensions: ... herong> keytool -printcert -file openssl_crt.der Owner: EMAILADDRESS=herongyang.com, CN=Herong Yang, OU=HY Unit, ... Issuer: EMAILADDRESS=herongyang.com, CN=Herong Yang, OU=HY Unit, ... Serial number: 0 Valid from: Sun Apr 1 13:02:22 EDT 2007 until: ... Certificate fingerprints: MD5: BF:B8:3A:19:E5:05:CE:CA:8C:F7:05:FA:FE:51:A6:EC SHA1: F7:C7:2A:57:73:5E:CE:E5:73:09:13:35:FB:91:CF:27:... Signature algorithm name: MD5withRSA Version: 3 Extensions: ...
Cool. "keytool" can read certificates in DER and PEM formats generated by "OpenSSL". What I learned so far:
Table of Contents
Introduction to AES (Advanced Encryption Standard)
DES Algorithm - Illustrated with Java Programs
DES Algorithm Java Implementation
DES Algorithm - Java Implementation in JDK JCE
DES Encryption Operation Modes
PHP Implementation of DES - mcrypt
Blowfish - 8-Byte Block Cipher
Secret Key Generation and Management
Cipher - Secret Key Encryption and Decryption
RSA Implementation using java.math.BigInteger Class
Introduction of DSA (Digital Signature Algorithm)
Java Default Implementation of DSA
Private key and Public Key Pair Generation
PKCS#8/X.509 Private/Public Encoding Standards
Cipher - Public Key Encryption and Decryption
OpenSSL Introduction and Installation
OpenSSL Generating and Managing RSA Keys
OpenSSL Generating and Signing CSR
OpenSSL Validating Certificate Path
"keytool" and "keystore" from JDK
"OpenSSL" Signing CSR Generated by "keytool"
Migrating Keys from "keystore" to "OpenSSL" Key Files
►Certificate X.509 Standard and DER/PEM Formats
What Is DER (Distinguished Encoding Rules) Encoding?
What Is PEM (Privacy Enhanced Mail) Encoding?
"keytool" Exporting Certificates in DER and PEM
"OpenSSL" Viewing Certificates in DER and PEM
"OpenSSL" Generating Certificates in DER and PEM
►"keytool" Viewing Certificates in DER and PEM
"keytool" Importing Certificates in DER and PEM
Migrating Keys from "OpenSSL" Key Files to "keystore"