Re: Need server certificates that include multiple commonName/subjectAltName fields for testing
Conrad Steenberg <[email protected]>
| Newsgroups | gmane.comp.python.cryptography |
|---|---|
| Organization | California Institute of Technology |
| Message-ID | <[email protected]> |
Hi Coming in a little late on the conversation, but Heikki is right, DNs with multiple CN fields are commonly used for proxy (usually short-lived) certificates. See e.g. the attached partial certificate chain. Cheers Conrad On Thu, 2006-03-23 at 14:26 -0800, Heikki Toivonen wrote: > Michael Ströder wrote: > > Heikki Toivonen wrote: > >> Exactly. If someone knows of such real world usage I want to see it and > >> test against it. > > > > I can't imagine a use-case for it. > > Well, there are cases where additional CN fields should be specified for > proxy certs for example (but it probably wouldn't be a hostname). > > Perhaps more common case is that instead of a wildcard cert you would > specify a limited number of hosts an SSL server cert could be deployed at. > > > http://csrc.nist.gov/pki/testing/ > > Cool, thanks! > -- Conrad Steenberg <[email protected]> California Institute of Technology | http://conradsteenberg.info
x509up_u3243
(text/plain, 2.6 KB)
-----BEGIN CERTIFICATE----- MIIDnjCCAoagAwIBAgIJAOSUUJ8BYq0fMA0GCSqGSIb3DQEBBAUAMGIxEzARBgoJ kiaJk/IsZAEZFgNvcmcxGDAWBgoJkiaJk/IsZAEZFghkb2VncmlkczEPMA0GA1UE CxMGUGVvcGxlMSAwHgYDVQQDExdDb25yYWQgU3RlZW5iZXJnIDE3ODk0NzAeFw0w NjAzMjgyMDMwNDZaFw0wNjAzMzAyMDMwNDZaMF0xHzAdBgoJkiaJk/IsZAEZFg9v cmcvREM9ZG9lZ3JpZHMxDzANBgNVBAsTBlBlb3BsZTEpMCcGA1UEAxMgQ29ucmFk IFN0ZWVuYmVyZyAxNzg5NDcvQ049cHJveHkwXDANBgkqhkiG9w0BAQEFAANLADBI AkEAn2aBNvdZecqmZMhmtTFOPN5Ri509WkQbLmX4QfaI/kR0aoOVcvFv05gFJVY3 iZv7bs+JXovx5oyUrAbSMf2MLwIDAQABo4IBIjCCAR4wCQYDVR0TBAIwADAOBgNV HQ8BAf8EBAMCBPAwEQYJYIZIAYb4QgEBBAQDAgXgME0GCWCGSAGG+EIBDQRAFj5D bGFyZW5zLWdlbmVyYXRlZCBjbGllbnQgYW5kIHNlcnZlciBhdXRoZW50aWNhdGlv biBjZXJ0aWZpY2F0ZTB8BgNVHSMEdTBzoW2kazBpMRMwEQYKCZImiZPyLGQBGRYD b3JnMRgwFgYKCZImiZPyLGQBGRYIRE9FR3JpZHMxIDAeBgNVBAsTF0NlcnRpZmlj YXRlIEF1dGhvcml0aWVzMRYwFAYDVQQDEw1ET0VHcmlkcyBDQSAxggIS3jAhBgNV HREEGjAYgRZjb25yYWRAaGVwLmNhbHRlY2guZWR1MA0GCSqGSIb3DQEBBAUAA4IB AQAZXADRvxFNQIF5UVcm6z65klnmi0TJNcJSd2Zp2fZUQCsrqumosy6HzUms5rEK jue/CQJDRTnKj6ff0ArktlJSaPQ5xePhKp4nKuH3i6enJpms0W2TvkS4N6aOXA1e 6KyIAfYG6Ax+jR0vtHjKZz5Lc42VrOdtRtKQWGq8g93pie9SUC5PBAF9JDCfs5Vu E+MgHd14btfKDEtZDAuIRw3bKuKRyNgUBmN4g2XJ2v6ry8sYQiDu04sC3cnIqDno 8faxq0IEtOnoNVjL+gpU7xpeED87+gNZPmcSluaMIroO0PaH1qW7njkAN+kEiFO5 FEpPRoUVfiYDiaHJkra9gMHd -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDsDCCApigAwIBAgICEt4wDQYJKoZIhvcNAQEFBQAwaTETMBEGCgmSJomT8ixk ARkWA29yZzEYMBYGCgmSJomT8ixkARkWCERPRUdyaWRzMSAwHgYDVQQLExdDZXJ0 aWZpY2F0ZSBBdXRob3JpdGllczEWMBQGA1UEAxMNRE9FR3JpZHMgQ0EgMTAeFw0w NTA2MTMxNDQ1NTZaFw0wNjA2MTMxNDQ1NTZaMGIxEzARBgoJkiaJk/IsZAEZFgNv cmcxGDAWBgoJkiaJk/IsZAEZFghkb2VncmlkczEPMA0GA1UECxMGUGVvcGxlMSAw HgYDVQQDExdDb25yYWQgU3RlZW5iZXJnIDE3ODk0NzCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAJrcrjSsYrPTTYOyC7HsXpfkGt5z2T5AMDbnz54Pf18D VyHxVvVa7AjQF1rAF9mTrn11MBBMkmO5XU5+nHIzscF/51gaTJo8vd32MFPBAovz tqtstCX/OKtySHut8jwDJXX1NI1K35bUjcEjKupL+p/firCRaaMIIRNPBUShG56Q f/BIGZkQjFedMqZ4UuxvEIMzO6G5rLGGjzMJ8TuDzf3Unh8Mzq7d2xb2bi3febqy 38OHOkhf0hOvIgbKiAVRe6phCUyL4dfeJ0pZ4apn5xeut0CIon0LX/Pf+xSJg/tp zD+KzuvR1yPmoSQMnnKj2VDm5jwguWiwbXyff4XsRDsCAwEAAaNpMGcwEQYJYIZI AYb4QgEBBAQDAgXgMA4GA1UdDwEB/wQEAwIE8DAhBgNVHREEGjAYgRZjb25yYWRA aGVwLmNhbHRlY2guZWR1MB8GA1UdIwQYMBaAFMoZHRKObqQ4XULUMQ4I29mNFw1d MA0GCSqGSIb3DQEBBQUAA4IBAQALezjvYPzIysegpwTTj9Aez4K1pooUXqOG4eTL RuoWBigyduiTYYTyBIRZiQd7vip7q+EyeZcS/pt2IOAq0HfLapHleBgKORCwPSB/ hK1VNsxgeLPIM50zDWa9ttkO6GqWk5pkx5NMOm9z9EUkkU0zlpC/jXjUwIXTipWp h9gIUDyj8SE8wuAwXh/FdiYuIT7mlcB74A2g4X1gWHbjMlSr0BsrzQL/v2+HICLE P2II312kCsRzNoc8TQYbw7CtZW0g5siumdye7dSwlyA/oK9R3USP6A6S4L1y8JWW m1TvlmVaAdR6bZwdur63kRiLSF1ZIss8PfZImBtVj7pOSlqH -----END CERTIFICATE-----
smime.p7s
(application/x-pkcs7-signature, 2.5 KB) - not displayed