PrettyPrintCert - print the contents of a certificate stored as ASCII base-64 encoded data to a readable

       Matthew Harmsen lt;mharmsen@redhat.comgt;.

       Copyright (c) 2016 Red Hat, Inc.  This is licensed under  the  GNU  General  Public  License,  version  2
       (GPLv2).  A copy of this license is available at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.

PKI                                               July 20, 2016                               PrettyPrintCert(1)

       The PrettyPrintCert command provides a command-line utility used to print the contents of  a  certificate
       stored  as  ASCII  base-64 encoded data to a readable format.  The output of this command is displayed to
       standard output, but can be optionally saved into a specified file.  An additional  non-mandatory  option
       is available which limits the certificate information output of this command for easier parsing.

       The  following  example  converts  the  ASCII base-64 encoded certificate in the ascii_data.cert file and
       writes the certificate in the pretty-print form to the output file cert.out:

              $ PrettyPrintCert ascii_data.cert cert.out

       For this example, the base-64 encoded certificate data in the ascii_data.cert looks like the following:

              -----BEGIN CERTIFICATE-----
              MIIECjCCAvKgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBOMSswKQYDVQQKDCJ1c2Vy
              c3lzLnJlZGhhdC5jb20gU2VjdXJpdHkgRG9tYWluMR8wHQYDVQQDDBZDQSBTaWdu
              aW5nIENlcnRpZmljYXRlMB4XDTE2MDcyMjIwMzEzOFoXDTE3MDExODIxMzEzOFow
              gZwxCzAJBgNVBAYTAlVTMRwwGgYDVQQKDBNFeGFtcGxlIENvcnBvcmF0aW9uMQsw
              CQYDVQQLDAJJUzEpMCcGA1UEAwwgUHJldHR5UHJpbnRDZXJ0IFRlc3QgQ2VydGlm
              aWNhdGUxIDAeBgkqhkiG9w0BCQEWEWFkbWluQGV4YW1wbGUuY29tMRUwEwYKCZIm
              iZPyLGQBAQwFYWRtaW4wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn
              Jv8ADWpC7C3Bzb13n9zQwaDW8YfyshZd7lXI0cghJOSfRLT6C10LOi1yhI+7W3NN
              MgYeLDCiRmKfHnqq6lpPg9aZmrxBwrn+30OdP+m1K6Crf6X9wqAWSR/r2hG4NuYi
              ovcJg7ani5h4BL+V0hbUvfEs4o7QfOWjQZcoo2KbOKmRrodAA21XVjWGB1ELQLNN
              hGwmZ6l1rtnN04Ruoclu8LaKMAAzFSH8cHEBtdCgxeDNy+bNnXbjO1wdruFNrars
              W6wdc230AvHRcEUWEvQVq86vHfS4UZ5q0N1ychibrHZXB0/+TUtyKDQGx0K7ELSB
              xgwt9QxEjKlXHiStcGupAgMBAAGjgaMwgaAwHwYDVR0jBBgwFoAUuzaYXWXLiOCH
              IzdvW/evi4rrurUwTgYIKwYBBQUHAQEEQjBAMD4GCCsGAQUFBzABhjJodHRwOi8v
              cGtpLWRlc2t0b3AudXNlcnN5cy5yZWRoYXQuY29tOjgwODAvY2Evb2NzcDAOBgNV
              HQ8BAf8EBAMCBeAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMA0GCSqG
              SIb3DQEBCwUAA4IBAQCgQ/vTCyQ+lHKNDNCtvbul2l6V3Sjzvj0il9t4HtorxoBF
              3FIE6VNpUYFq0AkNS/LjV7ek7LRl8kuuiKaNpqF6RvAIPrABPDh7hE1Gi3Vm+Xw/
              ndodT1AVII3x6xUbRsHu2iUVdZM5xO9ZFwA18nJUznL9q8lEGjj8vVCyFZuplUL+
              pdKqL3SgBNUdyfiV6vywevI9jFoZBlsQbn4EjBs2nNeaFSZhZ1NG6tktSt85fJ51
              IAiZv9Ipq0deHxFgpEywPq9lSrMZnm178PFlzRQUySHSm1pA+ngTydUKqZqAU0vr
              XIDTmj4lE93VPZspnPS94p/0OT4Pe3NKAe+IbIv/

              -----END CERTIFICATE-----
       The certificate in pretty-print format in the cert.out file looks like the following:

                  Certificate:
                      Data:
                          Version:  v3
                          Serial Number: 0x9
                          Signature Algorithm: SHA256withRSA - 1.2.840.113549.1.1.11
                          Issuer: CN=CA Signing Certificate,O=example.com Security Domain
                          Validity:
                              Not Before: Friday, July 22, 2016 2:31:38 PM MDT America/Denver
                              Not  After: Wednesday, January 18, 2017 2:31:38 PM MST America/Denver
                          Subject: UID=admin,E=admin@example.com,CN=PrettyPrintCert Test Certificate,OU=IS,O=Example Corporation,C=US
                          Subject Public Key Info:
                              Algorithm: RSA - 1.2.840.113549.1.1.1
                              Public Key:
                                  Exponent: 65537
                                  Public Key Modulus: (2048 bits) :
                                      E7:26:FF:00:0D:6A:42:EC:2D:C1:CD:BD:77:9F:DC:D0:
                                      C1:A0:D6:F1:87:F2:B2:16:5D:EE:55:C8:D1:C8:21:24:
                                      E4:9F:44:B4:FA:0B:5D:0B:3A:2D:72:84:8F:BB:5B:73:
                                      4D:32:06:1E:2C:30:A2:46:62:9F:1E:7A:AA:EA:5A:4F:
                                      83:D6:99:9A:BC:41:C2:B9:FE:DF:43:9D:3F:E9:B5:2B:
                                      A0:AB:7F:A5:FD:C2:A0:16:49:1F:EB:DA:11:B8:36:E6:
                                      22:A2:F7:09:83:B6:A7:8B:98:78:04:BF:95:D2:16:D4:
                                      BD:F1:2C:E2:8E:D0:7C:E5:A3:41:97:28:A3:62:9B:38:
                                      A9:91:AE:87:40:03:6D:57:56:35:86:07:51:0B:40:B3:
                                      4D:84:6C:26:67:A9:75:AE:D9:CD:D3:84:6E:A1:C9:6E:
                                      F0:B6:8A:30:00:33:15:21:FC:70:71:01:B5:D0:A0:C5:
                                      E0:CD:CB:E6:CD:9D:76:E3:3B:5C:1D:AE:E1:4D:AD:AA:
                                      EC:5B:AC:1D:73:6D:F4:02:F1:D1:70:45:16:12:F4:15:
                                      AB:CE:AF:1D:F4:B8:51:9E:6A:D0:DD:72:72:18:9B:AC:
                                      76:57:07:4F:FE:4D:4B:72:28:34:06:C7:42:BB:10:B4:
                                      81:C6:0C:2D:F5:0C:44:8C:A9:57:1E:24:AD:70:6B:A9
                          Extensions:
                              Identifier: Authority Key Identifier - 2.5.29.35
                                  Critical: no
                                  Key Identifier:
                                      BB:36:98:5D:65:CB:88:E0:87:23:37:6F:5B:F7:AF:8B:
                                      8A:EB:BA:B5
                              Identifier: 1.3.6.1.5.5.7.1.1
                                  Critical: no
                                  Value:
                                      30:40:30:3E:06:08:2B:06:01:05:05:07:30:01:86:32:
                                      68:74:74:70:3A:2F:2F:70:6B:69:2D:64:65:73:6B:74:
                                      6F:70:2E:75:73:65:72:73:79:73:2E:72:65:64:68:61:
                                      74:2E:63:6F:6D:3A:38:30:38:30:2F:63:61:2F:6F:63:
                                      73:70
                              Identifier: Key Usage: - 2.5.29.15
                                  Critical: yes
                                  Key Usage:
                                      Digital Signature
                                      Non Repudiation
                                      Key Encipherment
                              Identifier: Extended Key Usage: - 2.5.29.37
                                  Critical: no
                                  Extended Key Usage:
                                      1.3.6.1.5.5.7.3.2
                                      1.3.6.1.5.5.7.3.4
                      Signature:
                          Algorithm: SHA256withRSA - 1.2.840.113549.1.1.11
                          Signature:
                              A0:43:FB:D3:0B:24:3E:94:72:8D:0C:D0:AD:BD:BB:A5:
                              DA:5E:95:DD:28:F3:BE:3D:22:97:DB:78:1E:DA:2B:C6:
                              80:45:DC:52:04:E9:53:69:51:81:6A:D0:09:0D:4B:F2:
                              E3:57:B7:A4:EC:B4:65:F2:4B:AE:88:A6:8D:A6:A1:7A:
                              46:F0:08:3E:B0:01:3C:38:7B:84:4D:46:8B:75:66:F9:
                              7C:3F:9D:DA:1D:4F:50:15:20:8D:F1:EB:15:1B:46:C1:
                              EE:DA:25:15:75:93:39:C4:EF:59:17:00:35:F2:72:54:
                              CE:72:FD:AB:C9:44:1A:38:FC:BD:50:B2:15:9B:A9:95:
                              42:FE:A5:D2:AA:2F:74:A0:04:D5:1D:C9:F8:95:EA:FC:
                              B0:7A:F2:3D:8C:5A:19:06:5B:10:6E:7E:04:8C:1B:36:
                              9C:D7:9A:15:26:61:67:53:46:EA:D9:2D:4A:DF:39:7C:
                              9E:75:20:08:99:BF:D2:29:AB:47:5E:1F:11:60:A4:4C:
                              B0:3E:AF:65:4A:B3:19:9E:6D:7B:F0:F1:65:CD:14:14:
                              C9:21:D2:9B:5A:40:FA:78:13:C9:D5:0A:A9:9A:80:53:
                              4B:EB:5C:80:D3:9A:3E:25:13:DD:D5:3D:9B:29:9C:F4:
                              BD:E2:9F:F4:39:3E:0F:7B:73:4A:01:EF:88:6C:8B:FF
                      FingerPrint
                          MD2:
                              EC:AE:A5:A3:E5:FA:30:3B:34:0E:FD:9D:ED:46:56:03
                          MD5:
                              CB:E1:80:0C:B3:66:DF:CF:3A:2B:A9:C1:F4:88:88:23
                          SHA-1:
                              B6:BA:84:0D:AE:4E:B0:CD:84:71:D8:A4:61:60:A7:2D:
                              3A:7C:55:46
                          SHA-256:
                              B2:95:9C:8C:B9:3C:7B:9F:FF:8E:BD:92:90:BC:75:F5:
                              BB:0D:96:2C:93:05:20:1B:4C:9D:B9:59:6F:54:25:5B
                          SHA-512:
                              B9:7A:1E:2E:59:8C:6F:76:F5:52:36:AD:A6:62:E9:DD:
                              00:6E:82:7A:BA:38:1E:29:FC:F8:80:F1:DD:7C:81:92:
                              F1:C2:E3:34:27:1A:7A:EB:95:36:DB:65:41:A2:46:19:
                              FB:14:89:00:B5:8B:DB:AA:33:41:8C:6C:C4:75:CF:17

       The following example command takes the same ASCII base-64 encoded  certificate  in  the  ascii_data.cert
       file  and  writes  the  information  contained  within  the  certificate to the simple format output file
       cert.simple:

              $ PrettyPrintCert -simpleinfo ascii_data.cert cert.simple

       The simple certificate information in the cert.simple output file looks like the following:

              UID=admin
              E=admin@example.com
              CN=PrettyPrintCert Test Certificate
              OU=IS
              O=Example Corporation
              C=US

       PrettyPrintCert  - print the contents of a certificate stored as ASCII base-64 encoded data to a readable
       format.

-simpleinfo
           Optional. Prints limited certificate information in an easy to parse format;
           if this option is not specified, the entire contents of the certificate will be printed.

       lt;input-filegt;
           Mandatory. Specifies the path to the file containing the ASCII base-64 encoded certificate.

       lt;output-filegt;
           Optional. Specifies the path to the file in which the tool should write the certificate.
           If this option is not specified, the certificate information is written to the standard output.

PrettyPrintCrl(1), pki(1)

PrettyPrintCert [-simpleinfo] input-file [output-file]