OpenLDAP查看证书信息

# certutil -d /etc/openldap/certs/ -L -n 'OpenLDAP Server'
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            00:ac:1f:bb:56
        Signature Algorithm: PKCS #1 SHA-256 With RSA Encryption
        Issuer: "CN=rdsp-cn-01.cars.com"
        Validity:
            Not Before: Sat Dec 23 08:38:15 2017
            Not After : Sun Dec 23 08:38:15 2018
        Subject: "CN=rdsp-cn-01.cars.com"
        Subject Public Key Info:
            Public Key Algorithm: PKCS #1 RSA Encryption
            RSA Public Key:
                Modulus:
                    a8:36:3c:61:db:d4:ec:d5:02:35:10:9e:d8:f7:74:02:
                    8e:cf:42:2f:e4:30:90:95:d1:0d:1d:51:aa:d0:ed:d6:
                    ba:61:86:3f:52:f1:59:c0:04:ed:6c:34:3f:f1:42:35:
                    2a:c0:ef:e2:96:02:12:6d:80:85:f3:07:92:03:3d:bc:
                    42:6c:22:4d:9f:a2:23:33:f9:5b:f4:5a:e5:fe:cd:03:
                    34:bb:b1:8e:c6:1c:55:d4:79:20:88:65:19:a4:e9:e4:
                    75:1b:0d:e8:6a:f1:f8:91:7b:a5:65:7d:8e:5d:6f:a8:
                    55:4c:60:93:47:6a:4e:87:c9:be:b2:51:40:af:32:53
                Exponent: 65537 (0x10001)
        Signed Extensions:
            Name: Certificate Subject Alt Name
            DNS name: "rdsp-cn-01.cars.com"
            DNS name: "localhost"
            DNS name: "localhost.localdomain"


    Signature Algorithm: PKCS #1 SHA-256 With RSA Encryption
    Signature:
        5e:bc:63:f1:1a:5c:86:d9:ae:24:a2:bb:6a:09:14:e0:
        54:92:25:d4:9d:25:db:b1:8b:6b:86:65:4d:a8:5d:08:
        5e:fd:5e:6b:e4:83:4d:c1:11:44:cb:43:f5:94:66:08:
        29:2e:76:0c:48:79:66:f4:80:70:5a:aa:72:9d:16:7d:
        d0:49:54:61:20:e5:dc:d2:61:82:fe:8f:2f:a0:c9:1f:
        ea:5c:19:14:89:ee:25:f6:a3:f7:15:4d:8d:ae:d6:15:
        2b:04:d0:b5:c7:af:92:56:57:bd:fc:32:d6:f2:c4:3c:
        b1:33:b3:f4:ea:b2:8a:30:84:40:d5:94:09:d0:1b:7e
    Fingerprint (SHA-256):
        91:E1:9D:9E:EB:C2:C6:19:C2:C6:A5:F9:58:C5:DB:5C:1E:7C:81:63:F4:B7:78:5F:F3:8D:E6:9E:49:EE:4A:15
    Fingerprint (SHA1):
        48:8E:D7:DE:3F:BF:FA:6B:12:48:3B:85:28:1C:A2:23:59:7E:EF:A1


    Mozilla-CA-Policy: false (attribute missing)
    Certificate Trust Flags:
        SSL Flags:
            Valid CA
            Trusted CA
            User
            Trusted Client CA
        Email Flags:
            User
        Object Signing Flags:
            User