opemssl x509 指令查看 nginx pem 格式数字证书内容

[yeqiang@harbor Downloads]$ openssl x509 -inform pem -in full_chain.pem -noout -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ae:c6:c1:1c:35:1d:4e:bb:15:06:4a:46:95:25:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = CN, O = "TrustAsia Technologies, Inc.", OU = Domain Validated SSL, CN = TrustAsia TLS RSA CA
        Validity
            Not Before: Oct  8 00:00:00 2018 GMT
            Not After : Oct  8 12:00:00 2019 GMT
        Subject: CN = oss.sor4.cn
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:ee:b6:15:3f:9a:0b:a5:f4:63:cc:0a:af:
                    ec:63:31:ae:87:37:bc:0f:82:da:b4:18:f0:f7:2f:
                    0a:99:86:52:ce:b3:ad:5a:7b:77:43:35:d6:1c:12:
                    57:4a:ae:5d:6c:19:b5:a0:0b:dd:c7:8f:f8:d8:53:
                    94:a0:7a:5a:cc:06:cf:8e:1c:09:00:29:db:b7:34:
                    56:6e:7d:93:18:d3:6c:56:d1:c8:ad:53:e7:23:e7:
                    d5:88:b2:2a:c5:9c:3c:8b:71:e5:f9:5a:bf:07:19:
                    f3:fa:11:2f:fa:6c:b5:d3:c9:1f:33:56:44:c4:96:
                    32:8f:58:55:6c:ea:89:0d:e7:41:9d:18:1e:36:ef:
                    04:ab:3b:6c:ba:7f:60:a8:73:1b:de:5e:ac:85:ad:
                    09:77:bd:da:1a:db:a9:39:d7:a0:a1:f1:69:c2:0f:
                    94:55:9b:64:e3:51:5b:77:da:cf:93:85:89:40:d7:
                    eb:2a:a4:d5:04:78:50:82:50:e5:c4:4b:37:ba:7a:
                    db:5a:85:92:ef:b3:9f:d9:e8:4c:65:a3:be:a7:65:
                    59:b7:a7:a1:8d:bf:fa:88:99:f1:43:b5:68:9f:ce:
                    fb:27:d6:19:bd:72:38:0c:db:51:78:c9:2b:8b:f2:
                    e3:ce:77:46:4a:d2:6c:e7:4e:25:a2:ce:2e:17:86:
                    95:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:99:F3:A0:47:0E:31:00:56:56:22:8E:B7:CC:9E:DD:CA:01:8A

            X509v3 Subject Key Identifier: 
                C8:59:61:17:EA:9D:B0:A6:D1:10:63:AC:81:53:8A:07:9A:2D:49:46
            X509v3 Subject Alternative Name: 
                DNS:oss.sor4.cn
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.1.2
                  CPS: https://www.digicert.com/CPS
                Policy: 2.23.140.1.2.1

            Authority Information Access: 
                OCSP - URI:http://ocsp2.digicert.com
                CA Issuers - URI:http://cacerts.digitalcertvalidation.com/TrustAsiaTLSRSACA.crt

            X509v3 Basic Constraints: 
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : BB:D9:DF:BC:1F:8A:71:B5:93:94:23:97:AA:92:7B:47:
                                38:57:95:0A:AB:52:E8:1A:90:96:64:36:8E:1E:D1:85
                    Timestamp : Oct  8 10:44:36.078 2018 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:55:D3:36:92:10:03:A2:55:D9:46:95:6F:
                                33:4D:77:B4:66:52:7F:5B:CF:13:8F:02:22:C4:6B:F5:
                                04:90:8B:B0:02:21:00:A9:47:73:DD:7A:3C:90:19:16:
                                0F:B1:B3:EA:88:F1:F4:91:C5:DD:8C:49:6E:24:44:06:
                                B0:F1:90:B2:B7:3D:EA
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 87:75:BF:E7:59:7C:F8:8C:43:99:5F:BD:F3:6E:FF:56:
                                8D:47:56:36:FF:4A:B5:60:C1:B4:EA:FF:5E:A0:83:0F
                    Timestamp : Oct  8 10:44:36.294 2018 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:79:22:DF:88:27:DB:40:F2:B1:1F:17:87:
                                56:3C:FD:4C:43:FB:D3:BD:B5:60:2C:6D:6F:84:80:66:
                                B8:E4:0E:C7:02:21:00:E2:15:FF:99:33:77:C1:44:EF:
                                F6:B9:B6:DE:7B:8A:72:33:35:4E:BA:4C:98:35:BB:FA:
                                9A:42:9A:0D:8A:15:9A
    Signature Algorithm: sha256WithRSAEncryption
         44:2a:22:ea:e3:52:ac:1d:88:9e:47:b7:a3:51:ce:c3:7d:f5:
         eb:2c:76:10:19:5e:9f:2a:08:9f:a1:f0:c3:79:ec:27:fa:56:
         b2:65:c9:fd:5d:db:aa:3a:da:36:04:a2:a3:1a:f4:b8:dc:05:
         24:37:fc:20:d9:c3:20:40:dd:d4:df:42:34:5b:36:47:98:5f:
         19:c0:67:22:ea:b4:88:fd:a4:d4:04:30:7a:09:0c:ad:f4:c9:
         83:11:aa:0c:f6:ff:68:d3:be:c9:45:e1:2b:22:76:35:21:16:
         37:14:80:ba:da:44:14:27:58:81:ac:86:f4:fb:6c:96:45:77:
         49:aa:5f:8a:13:2e:50:a7:79:7a:ed:5e:d5:5d:bf:10:81:52:
         39:c3:50:0c:16:13:ff:fc:1d:c4:87:92:e1:fd:49:56:d3:4f:
         b7:0a:96:6c:62:d5:2b:b3:9b:b9:79:c8:c5:a8:22:2b:d9:47:
         ae:97:f5:a5:c7:3c:51:02:18:71:8a:45:c6:81:e0:ea:b0:f6:
         0a:fc:3b:af:fd:f0:5f:1a:c6:87:be:c6:79:13:65:44:a0:ef:
         99:a1:68:54:b6:be:a1:3b:85:eb:bb:71:d1:b4:47:72:97:f9:
         5b:76:08:32:98:c4:2d:35:44:27:ef:6e:74:da:a9:06:1f:e4:
         f0:ae:d4:14