Skip to content

Instantly share code, notes, and snippets.

@jwreagor
Created July 26, 2018 14:49
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save jwreagor/026664a4eacfc42a0c9f85e5abb63489 to your computer and use it in GitHub Desktop.
Save jwreagor/026664a4eacfc42a0c9f85e5abb63489 to your computer and use it in GitHub Desktop.
$ openssl x509 -in .keys/crdb/ca.crt -noout -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d0:69:a6:a0:b6:b8:9e:b5:cf:62:98:2e:b7:7d:9e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: O=Cockroach, CN=Cockroach CA
Validity
Not Before: Jul 24 18:54:32 2018 GMT
Not After : Aug 1 18:54:32 2028 GMT
Subject: O=Cockroach, CN=Cockroach CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (2048 bit)
Modulus (2048 bit):
00:be:da:03:87:34:0d:54:b2:2e:7e:08:ad:f7:c7:
ae:ff:c3:43:59:d4:d2:c2:8f:c4:3e:8e:85:3c:fb:
29:b8:dc:38:47:50:f3:15:d6:18:ba:fd:32:12:72:
fc:c2:f3:87:ea:af:35:2a:57:34:32:95:97:80:a1:
ea:97:f9:d5:af:43:02:c7:18:10:b6:50:f3:cb:1b:
a4:5b:1d:5e:c1:bd:b2:28:17:3d:92:ff:e5:92:bd:
ca:51:22:44:4b:7f:43:6b:d0:ef:be:59:c3:4e:94:
d8:87:37:ec:d9:40:6d:74:9b:e9:df:c6:42:41:62:
09:65:6c:51:9c:b9:6e:c5:ab:c1:12:81:e7:5e:c9:
e8:22:8d:cb:f7:92:4d:6a:c1:5b:4f:b4:1d:19:26:
56:1c:45:8a:15:9b:5b:2a:5a:12:b7:e3:eb:d5:0f:
a2:8b:12:de:1d:5c:2b:e6:a4:a7:f9:95:ea:32:93:
8e:c0:5a:db:d6:42:2a:4d:d6:9a:f3:cb:32:47:d2:
e1:9b:b2:1d:7c:20:54:b3:21:5e:78:7a:ca:6d:0e:
c8:6c:51:3e:c5:37:6b:d2:a9:c0:c4:59:37:72:1e:
7c:ee:29:c7:ac:b2:14:35:3c:87:c0:15:9a:bb:8b:
53:ef:eb:b3:45:69:bf:dd:18:e4:f2:39:6b:d1:95:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Non Repudiation, Key Encipherment, Certificate Sign
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:1
Signature Algorithm: sha256WithRSAEncryption
81:0b:34:c9:4a:ed:60:ca:16:b1:a1:30:ed:a4:5f:41:9e:1c:
ab:50:98:24:a2:df:ce:51:e9:e9:6c:46:34:05:e2:49:b4:32:
d9:da:7c:76:4c:50:bc:d0:e3:4d:07:ce:b6:64:92:d8:94:dd:
52:52:18:f0:9b:f0:1f:5f:a6:2b:34:b1:01:53:5c:d3:5c:cc:
f8:3f:b6:ad:2e:77:07:5e:ee:70:aa:e7:c4:07:af:7c:32:48:
2d:9e:a0:c3:fa:cc:7d:6c:de:06:e7:23:6c:07:90:f7:6c:57:
3e:87:f0:d5:7f:3b:51:f1:0f:0e:3b:d4:1b:da:c4:65:de:ab:
89:09:20:ea:a7:ca:2d:ba:34:bd:25:a3:3d:35:d2:37:75:1a:
c6:83:6d:f5:eb:de:4a:7b:1d:1e:3f:4d:df:6a:3b:79:25:fb:
6b:0a:e9:2a:c8:84:24:00:9d:ae:cc:0f:08:4f:bf:e3:0a:fb:
bb:5e:88:d0:ef:6b:92:ba:63:1b:71:82:aa:54:a9:cf:4c:4e:
83:01:e4:f9:6c:1c:68:78:ca:9e:b2:97:6e:8a:fc:05:1b:69:
3c:31:4b:23:eb:72:2d:74:6f:53:d5:fe:2b:39:11:9d:8d:c6:
a6:ec:f5:c3:06:4e:49:40:a0:b6:fd:07:f2:b9:ff:6a:df:00:
e1:a9:41:f8
$ openssl x509 -in .keys/crdb/client.root.crt -noout -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b6:87:61:e8:ba:6a:8d:80:6d:9e:d1:fa:93:f7:c9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: O=Cockroach, CN=Cockroach CA
Validity
Not Before: Jul 24 19:07:52 2018 GMT
Not After : Jul 29 19:07:52 2023 GMT
Subject: O=Cockroach, CN=root
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (2048 bit)
Modulus (2048 bit):
00:e6:d6:02:75:4e:83:87:76:64:86:2e:f5:4f:c7:
7f:05:2f:ea:98:36:c4:3a:03:96:c8:ba:5c:be:fa:
58:a5:49:b0:08:d5:5d:95:35:3d:60:fa:ec:a6:d2:
2c:84:ba:43:2a:bf:02:13:42:ff:76:38:7c:11:e7:
12:d0:3c:7d:1d:12:b0:75:9e:75:45:0d:23:3c:85:
87:3c:e4:16:6d:fd:35:a8:5a:61:9f:45:1b:44:89:
7b:2d:58:0b:55:45:81:31:af:33:57:27:e3:f9:73:
f9:44:79:b2:50:d6:61:89:ea:00:12:95:4c:e9:45:
7c:ab:01:49:0f:ef:52:1c:cf:39:f4:b9:f6:db:74:
25:95:eb:aa:d5:9f:5b:37:da:7e:82:d9:86:df:ec:
9e:c2:df:b9:4e:5b:c1:f0:cf:81:18:44:ae:e4:07:
0b:fb:3d:ed:e2:59:57:7e:af:fe:a9:b8:fa:0d:a6:
87:2a:d7:f2:ca:39:31:13:4e:90:fd:6d:76:e9:65:
6f:1c:9a:4e:4e:48:fa:11:c8:b3:c8:9f:46:d0:1b:
cb:bb:99:49:6b:8e:b0:40:62:5a:dc:37:f4:4d:4f:
b0:7b:51:32:38:94:02:c5:c5:da:60:6e:f4:73:1a:
d2:e1:39:4b:6f:cb:6b:ea:84:4f:73:03:98:65:78:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
a3:71:14:b2:3c:b9:78:73:bb:e4:8c:9e:73:2d:c0:6e:2b:1a:
9c:d9:45:b7:70:c2:d6:e0:6e:38:f8:0c:97:ed:af:20:f2:48:
28:bc:49:6d:2e:31:3f:64:29:29:59:b1:ff:f4:7b:04:b5:42:
e3:ab:1b:09:aa:cf:74:2a:67:8d:b1:61:34:a9:51:3c:30:f2:
0e:b0:3d:eb:b8:da:47:a0:6b:3d:5a:3d:df:40:d6:21:e8:44:
dd:64:1d:7a:63:26:04:db:46:ab:8d:ab:78:0d:e4:61:23:c6:
d1:8f:84:f4:09:fb:e8:40:2d:53:81:09:20:6d:51:ce:3d:0a:
1c:56:ed:74:74:4d:66:49:01:fe:f8:37:1c:77:0f:2d:bb:a3:
fb:e7:67:de:bb:01:b7:68:a6:4e:34:0b:f7:04:96:06:1c:58:
8b:1c:12:54:46:7f:91:78:86:6e:eb:2f:39:60:de:e8:8b:62:
b4:fa:2d:00:9f:aa:2b:b4:65:bb:3e:4d:06:a8:8b:59:5a:97:
19:4b:ca:06:18:fe:fe:c9:e9:1c:81:5c:2a:a3:b6:56:7c:3d:
93:93:e7:27:a0:e3:a5:ea:cf:17:a1:f6:a9:c6:d6:dd:2f:6f:
2d:92:4a:7d:6e:ce:cd:a0:0f:6d:d5:aa:45:4e:e8:17:e1:0e:
8c:85:fa:0f
$ openssl x509 -in .keys/crdb/node.crt -noout -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
bf:17:20:2d:5e:52:a7:d4:db:d3:fd:74:18:31:be:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: O=Cockroach, CN=Cockroach CA
Validity
Not Before: Jul 24 19:00:31 2018 GMT
Not After : Jul 29 19:00:31 2023 GMT
Subject: O=Cockroach, CN=node
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (2048 bit)
Modulus (2048 bit):
00:c9:ca:76:5f:79:4e:b5:94:1a:4a:ae:3c:bf:b4:
bd:08:1a:29:e6:9d:1c:49:f9:cc:a3:2b:9a:97:9d:
f8:81:d1:89:2f:ef:f5:a1:11:68:b1:7e:81:7d:85:
d5:fc:8a:f0:55:09:f4:d9:af:b3:66:e0:18:34:5c:
06:e5:25:65:39:af:23:36:02:06:ee:ef:52:12:6d:
f9:c5:5f:f8:ef:68:69:37:91:96:c7:ad:74:47:2c:
e4:9f:a9:3e:34:cd:a0:a8:11:01:e0:a8:f0:f8:cd:
4a:e1:b7:18:53:a3:2c:f4:c4:90:a0:17:a5:83:d7:
7e:2a:e7:23:1a:60:45:46:7e:f4:47:74:ae:46:32:
19:96:d6:ef:e3:76:34:7a:ef:45:ef:dc:c2:e7:4b:
73:a0:7e:a3:f8:b1:fb:90:9e:8b:f7:ca:ac:3b:35:
24:21:46:16:d9:19:6d:6b:04:ff:ef:a5:df:48:9a:
6e:c8:54:98:8d:29:1b:16:f0:75:7e:5a:58:27:a3:
eb:56:e2:eb:24:2b:04:0e:2b:90:26:c4:da:3b:54:
2c:f8:4b:af:85:c9:7a:fd:82:6b:3b:38:09:77:bd:
4d:f6:91:83:4c:ca:72:6c:d3:8f:76:38:09:9e:21:
79:a3:dd:f6:e0:31:e4:a0:f0:77:81:20:ac:9b:69:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Subject Alternative Name:
DNS:localhost
Signature Algorithm: sha256WithRSAEncryption
9e:ca:58:a3:d5:3d:0f:9f:77:2f:67:d4:6a:cc:50:00:cf:62:
6f:aa:a7:47:39:2e:b4:38:0f:e3:90:e8:d3:88:34:63:a4:cb:
af:47:8e:a3:a2:be:22:72:9b:b1:f0:a3:6c:f6:40:f3:c9:4c:
83:aa:92:3c:e5:c9:f3:c5:ec:b8:61:58:ec:99:8f:9f:88:c2:
4f:1d:b3:2d:3a:7d:03:b0:85:0d:5d:9a:e3:c9:f0:a6:db:d3:
b5:69:c0:ea:2a:53:19:f1:e9:3b:b6:54:9b:87:3c:23:67:d7:
4c:6d:67:ae:99:5e:1b:19:4f:39:d4:51:40:8f:56:c2:29:88:
97:cc:dd:a9:7e:25:92:90:37:24:43:9c:46:b8:aa:21:fe:b0:
0d:6f:8e:b4:b6:28:fe:28:77:f2:5c:5c:ae:4b:0f:87:62:da:
27:d4:32:12:cc:1e:ef:81:a7:1d:c2:cb:6a:3c:5a:86:23:78:
b3:64:7c:6b:61:71:ff:e6:e7:cf:0d:24:f8:7b:fe:d9:f8:14:
eb:78:88:2f:9d:49:ff:39:e7:2e:3e:88:3c:59:c9:83:05:1e:
d4:18:29:55:b0:7c:c1:60:02:32:71:f3:99:ad:2f:29:c2:6f:
1f:01:19:05:2c:7f:b7:4e:5f:97:06:8d:75:48:06:43:69:58:
88:1b:bb:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment