【原创】SSL证书文件详情查看

证书文件

 C:\Users\Zmrbak\ 的目录

2023/11/09  14:59    <DIR>          .
2023/11/09  14:59    <DIR>          ..
2023/11/09  14:01             1,675 www.talker-ai.com.key
2023/11/09  14:01             3,830 www.talker-ai.com.pem

查看证书的工具

https://slproweb.com/products/Win32OpenSSL.html

下载后安装。

查看证书

openssl x509 -in www.talker-ai.com.pem -nout -text

默认工具未添加到path中。按照如下指令，使用绝对路径来执行

"C:\Program Files\OpenSSL-Win64\bin\openssl" x509 -in www.talker-ai.com.pem -nout -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3e:0f:48:5b:e2:8f:7e:6b:a0:19:f7:9c:fd:25:7a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = Encryption Everywhere DV TLS CA - G2
        Validity
            Not Before: Nov  9 00:00:00 2023 GMT
            Not After : Nov  9 23:59:59 2024 GMT
        Subject: CN = www.talker-ai.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e2:49:99:98:b8:e3:9e:36:92:6c:88:45:dd:18:
                    3d:56:89:39:be:5e:98:81:22:a2:04:ff:d5:71:37:
                    75:36:0a:b2:55:76:c4:ad:b2:f1:c5:2f:10:6d:c0:
                    cc:ad:11:91:20:14:43:ed:00:f5:22:e9:84:01:36:
                    dc:e8:63:10:1e:ac:99:22:0e:d2:d9:25:6b:d0:04:
                    14:58:e9:bb:6b:45:e4:41:64:d1:c1:ef:1f:f2:86:
                    b1:11:fc:7f:90:27:28:f8:b3:58:65:e9:8a:b9:85:
                    b9:9f:b0:f7:a6:bc:80:b7:81:94:60:83:94:f7:67:
                    ec:c7:b3:72:38:e5:55:1b:48:0d:4d:a6:da:95:b8:
                    94:62:c6:30:1f:11:48:f2:7f:4b:b3:44:b3:58:bf:
                    da:9c:c1:30:3e:2b:83:61:ec:b9:72:78:7f:ae:9e:
                    cf:5f:c8:94:0e:01:53:cb:61:16:f2:7b:54:ec:cc:
                    fe:2c:6c:2c:27:d9:ee:e9:d8:01:d1:4a:eb:ae:33:
                    1d:92:b1:4a:53:92:8a:07:90:81:2e:8a:bf:21:4b:
                    b2:7d:79:a9:6d:83:fd:00:fe:eb:9f:bc:21:7f:fe:
                    6e:bf:c4:92:01:75:76:b7:4b:d8:62:9e:3b:37:c8:
                    9e:23:a3:46:5a:7d:77:dd:74:13:0f:9e:df:bb:ae:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                78:DF:91:90:5F:EE:DE:AC:F6:C5:75:EB:D5:4C:55:53:EF:24:4A:B6
            X509v3 Subject Key Identifier:
                4C:51:0E:2A:09:F0:ED:FF:1C:37:8D:35:F8:A8:C1:04:20:E4:28:DA
            X509v3 Subject Alternative Name:
                DNS:www.talker-ai.com, DNS:talker-ai.com
            X509v3 Certificate Policies:
                Policy: 2.23.140.1.2.1
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            Authority Information Access:
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs:
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
                                B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
                    Timestamp : Nov  9 05:56:07.695 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:7F:20:50:A9:82:83:7F:BD:5C:7F:4E:86:
                                3C:95:1B:5B:D0:7D:12:8A:C5:BA:9C:0B:21:EF:70:E1:
                                EE:DC:15:02:02:20:43:1F:74:26:B0:6C:43:82:9C:66:
                                EC:68:60:13:7E:7F:A2:D1:32:58:3C:69:30:6D:CF:D5:
                                5B:08:1D:69:05:E9
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Nov  9 05:56:07.651 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:D4:CB:D9:2F:86:77:C7:BB:AD:CA:9B:
                                9F:1C:1D:E8:2E:10:F8:99:28:A4:9E:60:82:1B:D3:8C:
                                ED:D7:58:C9:40:02:21:00:B2:D9:A4:FE:45:24:9A:D6:
                                B4:77:65:60:BB:B1:07:42:C7:A5:0B:5D:ED:BE:12:53:
                                D7:D8:ED:59:38:17:22:24
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : Nov  9 05:56:07.724 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:3C:39:EA:74:CF:A9:CE:92:4C:7F:93:7F:
                                C1:84:26:ED:1A:25:F5:0B:D3:E8:E5:0D:A2:D7:3B:DA:
                                3A:CE:47:2C:02:20:13:BF:62:E5:26:33:8B:EE:77:91:
                                31:90:C9:3C:77:97:45:2A:A0:19:30:83:8F:50:02:68:
                                A3:4B:AE:8B:0E:3B
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        e6:7f:63:05:5a:48:22:97:0b:93:6a:7d:59:c4:73:32:60:b1:
        38:04:6f:bb:7e:c3:75:62:a5:30:be:c6:84:db:02:50:1a:03:
        47:0c:17:a8:dd:d6:9a:3d:52:01:ae:a5:e2:a7:74:a2:5c:a7:
        54:c4:0e:5b:e6:5d:34:95:01:42:50:e7:42:ca:97:00:d4:b6:
        77:7f:43:7e:f9:6d:2c:62:73:f0:38:27:20:73:c2:de:19:5b:
        ed:0a:b5:10:df:26:cc:97:1b:49:81:87:a3:73:9f:70:ee:02:
        bf:2e:82:7d:f0:9b:b6:c8:fb:df:d0:ed:15:c0:4f:a0:da:22:
        17:54:d5:cc:79:65:ab:17:57:70:07:d6:e2:0c:13:72:a3:89:
        6a:63:1f:a3:c9:83:c3:84:b7:95:b1:18:05:b6:64:ac:cc:9d:
        62:09:a6:d3:14:c6:8f:55:9f:cc:a5:ad:ee:79:89:c9:23:6a:
        da:40:76:33:38:e3:ed:7d:4a:14:49:e7:55:43:ba:17:4d:2d:
        5a:74:2a:35:49:e3:4d:c2:c7:5e:aa:ad:73:bd:05:30:ac:af:
        c4:e5:11:8f:02:d5:6f:20:31:d2:db:ba:fc:1d:33:5b:2a:18:
        3c:a1:7e:7b:3b:18:07:c4:56:54:ff:53:1c:7e:f8:e0:7f:08:
        bc:28:9f:47

pem文件结构

-----BEGIN CERTIFICATE-----
base64 编码
该域名的公钥、以及相关信息、发证者对其签名
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
base64 编码
发证者公钥、以及相关信息
-----END CERTIFICATE-----