1.填充内容说明
CA证书申请CSR文件主要包括Common Name,Organization,Organizational Unit,City/Locality,State/County/Region,Country,Email address,Public Key,signature以上都是可变的填充内容,即不同申请用户,填写的内容不一样。参考链接:
https://www.sslshopper.com/what-is-a-csr-certificate-signing-request.html
此外还有一些rsaEncryption,sha1WithRSAEncryption算法标识可以固定。
CSR文件的数据如下所示:
-----BEGIN CERTIFICATE REQUEST-----
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
-----END CERTIFICATE REQUEST-----
利用网站可以解析CSR文件得到ASN.1编码文件。网址链接如下:
解析结果为:
Subject
RDN
Value
Common Name (CN)
testcert.redkestrel.co.uk
Organization (O)
Red Kestrel Consulting Ltd
Locality (L)
Stoke on Trent
State (ST)
Staffordshire
Country (C)
GB
Properties
Property
Value
Subject
CN = testcert.redkestrel.co.uk,O = Red Kestrel Consulting Ltd,L = Stoke on Trent,ST = Staffordshire,C = GB
Key Size
2048 bits
Fingerprint (SHA-1)
2E:7E:41:27:0F:E0:D9:A8:E4:5E:68:DC:89:64:5F:A5:D0:FB:47:BF
Fingerprint (MD5)
59:1D:E9:57:7B:AE:BA:18:FE:E6:A6:CC:14:AC:C4:2C
SANS
CSR Detailed Information
Certificate Request:
Data:
Version: 0 (0x0)
Subject:
commonName = testcert.redkestrel.co.uk
organizationName = Red Kestrel Consulting Ltd
localityName = Stoke on Trent
stateOrProvinceName = Staffordshire
countryName = GB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d6:2d:e5:bc:f0:87:80:21:ad:e7:db:74:7d:f6:
2f:3b:e1:f8:74:8d:eb:5f:f9:24:ec:18:f8:24:7c:
65:c6:27:ef:ad:72:52:86:93:73:09:13:48:a3:0f:
83:cd:6b:11:97:50:23:54:2e:09:f6:44:ec:b2:6e:
6e:6c:4e:61:b3:a4:43:83:fb:50:00:03:25:7e:a4:
b4:28:14:d9:07:10:5b:ae:74:6a:95:33:a5:e4:3d:
67:ea:68:cd:af:2a:f7:73:51:b3:cf:0b:45:ff:31:
f0:c5:18:fc:5c:f0:06:37:4d:43:37:f3:97:3d:73:
df:d6:38:81:7a:35:47:00:bc:01:48:40:5d:33:1b:
b7:af:cc:96:41:a8:36:f8:7a:75:27:6a:d3:12:2c:
79:b1:45:63:22:d4:97:87:b5:f2:c8:35:78:4d:8a:
d1:de:c0:44:16:80:80:77:8f:5c:66:87:b0:8f:3b:
91:5e:4d:be:87:cd:00:f1:73:e7:fb:b8:c8:ac:63:
ab:3d:27:f3:e1:dc:67:8e:09:e2:03:a2:8a:94:f2:
39:df:57:97:86:13:32:0c:1f:90:85:31:98:da:8e:
b3:4a:17:80:d8:2b:76: