Cisco 4402 Configuration Guide - Page 57

TERENA is the, issuer, Duration, The server certificate, has been issued to, the server radius, - web authentication certificate

Page 57 highlights

root@sirius:~/tmp$ openssl x509 -noout -text -in test.pem Certificate: Data: Version: 3 (0x2) Serial Number: 52:75:c4:ea:b2:96:a3:04:96:23:6e:60:b0:52:f1:67 Signature Algorithm: sha1WithRSAEncryption Issuer: C=NL, O=TERENA, CN=TERENA SSL CA Validity Not Before: May 12 00:00:00 2010 GMT Not After : May 11 23:59:59 2013 GMT Subject: C=NO, O=UNINETT AS, CN=radius-test.uninett.no Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (2048 bit) Modulus (2048 bit): 00:b8:b6:7e:f4:83:54:34:bc:c5:38:ec:f8:2d:cf: ee:b1:1d:1b:f0:41:7a:fc:0a:71:c2:e0:fc:85:de: e9:cb:ed:8d:fa:06:b6:70:44:3e:8a:7f:fc:f3:b1: 20:f4:65:cf:f5:86:cd:12:0f:55:76:df:83:10:7a: f7:66:9a:17:f0:5a:15:02:81:21:5c:8f:13:d6:f5: 48:d6:15:84:bb:41:1c:06:9a:e9:1c:bf:da:2d:7a: 50:e9:12:4d:84:20:71:4e:a9:9c:66:63:db:70:ec: 32:36:60:c1:a0:10:53:2d:73:90:b7:bd:79:a5:08: 58:78:6b:00:26:66:c1:5d:c7:d9:71:c6:c3:a3:5e: 50:df:69:d3:0a:5f:7c:9e:4a:3a:53:74:7a:2c:d7: c1:83:b9:05:53:f5:38:ed:2a:70:2d:dc:2d:34:a2: ce:09:4d:1c:11:6b:04:44:25:ba:a2:46:09:23:e4: 86:4e:2c:83:54:6f:d2:1a:85:38:8c:db:07:1c:6f: 54:1b:54:bb:c1:c2:4f:5f:e3:00:ce:19:05:0e:f4: 7f:de:b9:68:bd:3c:1a:b0:c8:af:b4:82:37:67:db: c1:91:fd:d4:91:5a:fb:92:a5:f9:cb:9d:1e:9e:df: 01:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: keyid:0C:BD:93:68:0C:F3:DE:AB:A3:49:6B:2B:37:57:47:EA:90:E3:B9:ED X509v3 Subject Key Identifier: 27:41:30:77:3A:42:7C:F9:67:66:50:A1:E9:D1:2A:FC:BB:1D:EF:73 X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Certificate Policies: Policy: 1.3.6.1.4.1.6449.1.2.2.29 X509v3 CRL Distribution Points: URI:http://crl.tcs.terena.org/TERENASSLCA.crl Authority Information Access: CA Issuers - URI:http://crt.tcs.terena.org/TERENASSLCA.crt OCSP - URI:http://ocsp.tcs.terena.org X509v3 Subject Alternative Name: DNS:radius-test.uninett.no Signature Algorithm: sha1WithRSAEncryption 52:80:07:f2:9b:a5:50:f2:e3:43:4c:cd:5c:41:0c:96:cd:56: 21:10:c9:e6:a9:2a:fe:44:ae:a9:bc:77:5c:c8:d3:f4:59:30: 2e:a6:56:09:a3:2e:3f:3e:e7:09:cd:a1:c1:2e:d0:56:7d:b2: a7:eb:f0:e7:92:df:10:3b:26:89:36:34:b5:b3:e2:b0:52:db: 9e:22:1e:a8:fe:36:b2:24:cd:a4:33:e2:63:24:2d:aa:4d:de: 9c:fa:8a:fe:34:b3:42:2b:26:fa:2b:c9:f4:9f:87:1e:ad:54: db:bc:0f:a6:b3:de:57:02:19:cf:1d:7c:bd:58:e0:41:2e:65: 44:81:2b:66:53:49:2f:f0:18:1e:54:d6:3a:9a:2e:87:08:b6: 9c:a7:78:04:85:19:ba:4d:ac:ed:b3:d2:9d:d7:00:21:53:44: 5c:2f:29:8b:ab:d5:28:c6:bb:4a:34:c4:f2:45:fb:5b:14:e7: 75:b4:d8:79:28:f0:1b:9b:60:38:2f:c2:99:00:f8:9f:d7:34: 1c:0c:59:e9:58:35:36:a3:f0:36:e9:c3:be:6a:1b:c5:9b:6c: a1:46:20:ff:9b:64:68:a3:65:7f:ac:05:4a:05:9a:7e:5f:11: 44:a1:25:fe:0c:ce:6f:da:52:12:c5:5g:d9:e0:23:fa:60:f8: c2:f1:18:72 TERENA is the issuer Duration The server certificate has been issued to the server "radiustest" Public key Signature 57

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60

57
root@sirius:~/tmp$ openssl x509 -noout -text -in test.pem
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:75:c4:ea:b2:96:a3:04:96:23:6e:60:b0:52:f1:67
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=NL, O=TERENA, CN=TERENA SSL CA
Validity
Not Before: May 12 00:00:00 2010 GMT
Not After : May 11 23:59:59 2013 GMT
Subject: C=NO, O=UNINETT AS, CN=radius-test.uninett.no
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (2048 bit)
Modulus (2048 bit):
00:b8:b6:7e:f4:83:54:34:bc:c5:38:ec:f8:2d:cf:
ee:b1:1d:1b:f0:41:7a:fc:0a:71:c2:e0:fc:85:de:
e9:cb:ed:8d:fa:06:b6:70:44:3e:8a:7f:fc:f3:b1:
20:f4:65:cf:f5:86:cd:12:0f:55:76:df:83:10:7a:
f7:66:9a:17:f0:5a:15:02:81:21:5c:8f:13:d6:f5:
48:d6:15:84:bb:41:1c:06:9a:e9:1c:bf:da:2d:7a:
50:e9:12:4d:84:20:71:4e:a9:9c:66:63:db:70:ec:
32:36:60:c1:a0:10:53:2d:73:90:b7:bd:79:a5:08:
58:78:6b:00:26:66:c1:5d:c7:d9:71:c6:c3:a3:5e:
50:df:69:d3:0a:5f:7c:9e:4a:3a:53:74:7a:2c:d7:
c1:83:b9:05:53:f5:38:ed:2a:70:2d:dc:2d:34:a2:
ce:09:4d:1c:11:6b:04:44:25:ba:a2:46:09:23:e4:
86:4e:2c:83:54:6f:d2:1a:85:38:8c:db:07:1c:6f:
54:1b:54:bb:c1:c2:4f:5f:e3:00:ce:19:05:0e:f4:
7f:de:b9:68:bd:3c:1a:b0:c8:af:b4:82:37:67:db:
c1:91:fd:d4:91:5a:fb:92:a5:f9:cb:9d:1e:9e:df:
01:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:0C:BD:93:68:0C:F3:DE:AB:A3:49:6B:2B:37:57:47:EA:90:E3:B9:ED
X509v3 Subject Key Identifier:
27:41:30:77:3A:42:7C:F9:67:66:50:A1:E9:D1:2A:FC:BB:1D:EF:73
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.29
X509v3 CRL Distribution Points:
Authority Information Access:
X509v3 Subject Alternative Name:
DNS:radius-test.uninett.no
Signature Algorithm: sha1WithRSAEncryption
52:80:07:f2:9b:a5:50:f2:e3:43:4c:cd:5c:41:0c:96:cd:56:
21:10:c9:e6:a9:2a:fe:44:ae:a9:bc:77:5c:c8:d3:f4:59:30:
2e:a6:56:09:a3:2e:3f:3e:e7:09:cd:a1:c1:2e:d0:56:7d:b2:
a7:eb:f0:e7:92:df:10:3b:26:89:36:34:b5:b3:e2:b0:52:db:
9e:22:1e:a8:fe:36:b2:24:cd:a4:33:e2:63:24:2d:aa:4d:de:
9c:fa:8a:fe:34:b3:42:2b:26:fa:2b:c9:f4:9f:87:1e:ad:54:
db:bc:0f:a6:b3:de:57:02:19:cf:1d:7c:bd:58:e0:41:2e:65:
44:81:2b:66:53:49:2f:f0:18:1e:54:d6:3a:9a:2e:87:08:b6:
9c:a7:78:04:85:19:ba:4d:ac:ed:b3:d2:9d:d7:00:21:53:44:
5c:2f:29:8b:ab:d5:28:c6:bb:4a:34:c4:f2:45:fb:5b:14:e7:
75:b4:d8:79:28:f0:1b:9b:60:38:2f:c2:99:00:f8:9f:d7:34:
1c:0c:59:e9:58:35:36:a3:f0:36:e9:c3:be:6a:1b:c5:9b:6c:
a1:46:20:ff:9b:64:68:a3:65:7f:ac:05:4a:05:9a:7e:5f:11:
44:a1:25:fe:0c:ce:6f:da:52:12:c5:5g:d9:e0:23:fa:60:f8:
c2:f1:18:72
TERENA is the
issuer
Duration
The server certificate
has been issued to
the server “radius-
test”
Public key
Signature