Digital Certificate and its authentication process [reprinted], digital certificate reprinted
As we all know, public key cryptography makes it easy to use digital signatures, encrypted communications, and other key services by using the public key
The concepts related to certificates are really tricky because they haven't been exposed to certificate encryption before, because there's a whole new term coming up that looks like something else in another field, not something that we're familiar
The main file types and protocols for certificates are: PEM, DER, PFX, JKS, KDB, CER, Key, CSR, CRT, CRL, OCSP, SCEP, etc.
Pem–openssl uses the PEM (privacy enhanced Mail) format to hold various information, which is the default way of storing
Different certificates are stored in different formats (such as whether the public key or private key is encrypted for storage, a single certificate, or multiple certificates), and are encoded differently (der/base64) different standards (such as
Certificate Online ToolIf you are applying for the SSL certificate for the first time, if you are unfamiliar with how your server uses SSL certificates, we recommend that you use this set of tools, which support all SSL server certificate formats
Under the Windows platform, if you want to parse a X509 certificate file, the most straightforward way is to use Microsoft's CryptoAPI. But under the non-Windows platform, you can only use the powerful open source cross-platform library OpenSSL.
Document directory
1. Certificate Format
2. Conversion Method
1. Certificate Format PEM format
PEM format is usually used by a digital certificate authority (CA). The extension is. Pem,. crt,. cer, and. key. The content is a base64 encoded ASCII
Step 1: Obtain the server certificate
Obtain the server certificate (this certificate is sent to the user by the GlobalSign system via Email). The content of the Certificate file is (including "----- BEGIN PKCS7 -----" and "----- END PKCS7 -----"
Http://blog.chinaunix.net/uid-26575352-id-3073802.html
Common certificate formats and mutual conversionsThe PKCS full name is Public-key cryptography standards, a set of standards developed by RSA Labs and other security system developers to
. P7B converted to. PFX1. Download the OpenSSL tool (for example, Windows system)Https://www.chinassl.net/download/d1.html2. Format conversionp7b (pkcs#7)A p7b file is a text file that contains a certificate and a chain of certificates, but does not
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.