PrettyPrintCert(1)

📦
version 11.7.1 · 3 versions
, in centos-stream 9, ubuntu jammy

okay bestie, welcome to the manual page for PrettyPrintCert(1) from the PKI Certificate Print Tool — it's literally here to turn a certificate stored as ASCII base-64 encoded data into a readable format, and honestly? iconic. 💅

✨ NAME ✨

PrettyPrintCert — print the contents of a certificate stored as ASCII base-64 encoded data to a readable format. No cap, that's the whole glow-up. 🎀

🌸 SYNOPSIS 🌸

PrettyPrintCert [-simpleinfo] input-file [output-file]

🦋 DESCRIPTION 🦋

The PrettyPrintCert command is a command-line utility used to print the contents of a certificate stored as ASCII base-64 encoded data to a readable format. It's giving "please make this blob make sense" energy, and it ate. ✨

The output of this command is displayed to standard output, but can be optionally saved into a specified file. There's also an additional non-mandatory option available that limits the certificate information output of this command for easier parsing. 🫶

💖 OPTIONS 💖

  • -simpleinfo — Optional. Prints limited certificate information in an easy to parse format; if this option is not specified, the entire contents of the certificate will be printed. 🎀
  • <input-file> — Mandatory. Specifies the path to the file containing the ASCII base-64 encoded certificate.
  • <output-file> — Optional. Specifies the path to the file in which the tool should write the certificate. If this option is not specified, the certificate information is written to the standard output.

🌈 EXAMPLES 🌈

The following example converts the ASCII base-64 encoded certificate in the ascii_data.cert file and writes the certificate in the pretty-print form to the output file cert.out:

$ PrettyPrintCert ascii_data.cert cert.out

For this example, the base-64 encoded certificate data in the ascii_data.cert looks like the following:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

The certificate in pretty-print format in the cert.out file looks like the following:

              Certificate:
                  Data:
                      Version:  v3
                      Serial Number: 0x9
                      Signature Algorithm: SHA256withRSA - 1.2.840.113549.1.1.11
                      Issuer: CN=CA Signing Certificate,O=example.com Security Domain
                      Validity:
                          Not Before: Friday, July 22, 2016 2:31:38 PM MDT America/Denver
                          Not  After: Wednesday, January 18, 2017 2:31:38 PM MST America/Denver
                      Subject: UID=admin,E=admin@example.com,CN=PrettyPrintCert Test Certificate,OU=IS,O=Example Corporation,C=US
                      Subject Public Key Info:
                          Algorithm: RSA - 1.2.840.113549.1.1.1
                          Public Key:
                              Exponent: 65537
                              Public Key Modulus: (2048 bits) :
                                  E7:26:FF:00:0D:6A:42:EC:2D:C1:CD:BD:77:9F:DC:D0:
                                  C1:A0:D6:F1:87:F2:B2:16:5D:EE:55:C8:D1:C8:21:24:
                                  E4:9F:44:B4:FA:0B:5D:0B:3A:2D:72:84:8F:BB:5B:73:
                                  4D:32:06:1E:2C:30:A2:46:62:9F:1E:7A:AA:EA:5A:4F:
                                  83:D6:99:9A:BC:41:C2:B9:FE:DF:43:9D:3F:E9:B5:2B:
                                  A0:AB:7F:A5:FD:C2:A0:16:49:1F:EB:DA:11:B8:36:E6:
                                  22:A2:F7:09:83:B6:A7:8B:98:78:04:BF:95:D2:16:D4:
                                  BD:F1:2C:E2:8E:D0:7C:E5:A3:41:97:28:A3:62:9B:38:
                                  A9:91:AE:87:40:03:6D:57:56:35:86:07:51:0B:40:B3:
                                  4D:84:6C:26:67:A9:75:AE:D9:CD:D3:84:6E:A1:C9:6E:
                                  F0:B6:8A:30:00:33:15:21:FC:70:71:01:B5:D0:A0:C5:
                                  E0:CD:CB:E6:CD:9D:76:E3:3B:5C:1D:AE:E1:4D:AD:AA:
                                  EC:5B:AC:1D:73:6D:F4:02:F1:D1:70:45:16:12:F4:15:
                                  AB:CE:AF:1D:F4:B8:51:9E:6A:D0:DD:72:72:18:9B:AC:
                                  76:57:07:4F:FE:4D:4B:72:28:34:06:C7:42:BB:10:B4:
                                  81:C6:0C:2D:F5:0C:44:8C:A9:57:1E:24:AD:70:6B:A9
                      Extensions:
                          Identifier: Authority Key Identifier - 2.5.29.35
                              Critical: no
                              Key Identifier:
                                  BB:36:98:5D:65:CB:88:E0:87:23:37:6F:5B:F7:AF:8B:
                                  8A:EB:BA:B5
                          Identifier: 1.3.6.1.5.5.7.1.1
                              Critical: no
                              Value:
                                  30:40:30:3E:06:08:2B:06:01:05:05:07:30:01:86:32:
                                  68:74:74:70:3A:2F:2F:70:6B:69:2D:64:65:73:6B:74:
                                  6F:70:2E:75:73:65:72:73:79:73:2E:72:65:64:68:61:
                                  74:2E:63:6F:6D:3A:38:30:38:30:2F:63:61:2F:6F:63:
                                  73:70
                          Identifier: Key Usage: - 2.5.29.15
                              Critical: yes
                              Key Usage:
                                  Digital Signature
                                  Non Repudiation
                                  Key Encipherment
                          Identifier: Extended Key Usage: - 2.5.29.37
                              Critical: no
                              Extended Key Usage:
                                  1.3.6.1.5.5.7.3.2
                                  1.3.6.1.5.5.7.3.4
                  Signature:
                      Algorithm: SHA256withRSA - 1.2.840.113549.1.1.11
                      Signature:
                          A0:43:FB:D3:0B:24:3E:94:72:8D:0C:D0:AD:BD:BB:A5:
                          DA:5E:95:DD:28:F3:BE:3D:22:97:DB:78:1E:DA:2B:C6:
                          80:45:DC:52:04:E9:53:69:51:81:6A:D0:09:0D:4B:F2:
                          E3:57:B7:A4:EC:B4:65:F2:4B:AE:88:A6:8D:A6:A1:7A:
                          46:F0:08:3E:B0:01:3C:38:7B:84:4D:46:8B:75:66:F9:
                          7C:3F:9D:DA:1D:4F:50:15:20:8D:F1:EB:15:1B:46:C1:
                          EE:DA:25:15:75:93:39:C4:EF:59:17:00:35:F2:72:54:
                          CE:72:FD:AB:C9:44:1A:38:FC:BD:50:B2:15:9B:A9:95:
                          42:FE:A5:D2:AA:2F:74:A0:04:D5:1D:C9:F8:95:EA:FC:
                          B0:7A:F2:3D:8C:5A:19:06:5B:10:6E:7E:04:8C:1B:36:
                          9C:D7:9A:15:26:61:67:53:46:EA:D9:2D:4A:DF:39:7C:
                          9E:75:20:08:99:BF:D2:29:AB:47:5E:1F:11:60:A4:4C:
                          B0:3E:AF:65:4A:B3:19:9E:6D:7B:F0:F1:65:CD:14:14:
                          C9:21:D2:9B:5A:40:FA:78:13:C9:D5:0A:A9:9A:80:53:
                          4B:EB:5C:80:D3:9A:3E:25:13:DD:D5:3D:9B:29:9C:F4:
                          BD:E2:9F:F4:39:3E:0F:7B:73:4A:01:EF:88:6C:8B:FF
                  FingerPrint
                      MD2:
                          EC:AE:A5:A3:E5:FA:30:3B:34:0E:FD:9D:ED:46:56:03
                      MD5:
                          CB:E1:80:0C:B3:66:DF:CF:3A:2B:A9:C1:F4:88:88:23
                      SHA-1:
                          B6:BA:84:0D:AE:4E:B0:CD:84:71:D8:A4:61:60:A7:2D:
                          3A:7C:55:46
                      SHA-256:
                          B2:95:9C:8C:B9:3C:7B:9F:FF:8E:BD:92:90:BC:75:F5:
                          BB:0D:96:2C:93:05:20:1B:4C:9D:B9:59:6F:54:25:5B
                      SHA-512:
                          B9:7A:1E:2E:59:8C:6F:76:F5:52:36:AD:A6:62:E9:DD:
                          00:6E:82:7A:BA:38:1E:29:FC:F8:80:F1:DD:7C:81:92:
                          F1:C2:E3:34:27:1A:7A:EB:95:36:DB:65:41:A2:46:19:
                          FB:14:89:00:B5:8B:DB:AA:33:41:8C:6C:C4:75:CF:17

The following example command takes the same ASCII base-64 encoded certificate in the ascii_data.cert file and writes the information contained within the certificate to the simple format output file cert.simple:

$ PrettyPrintCert -simpleinfo ascii_data.cert cert.simple

The simple certificate information in the cert.simple output file looks like the following:

UID=admin
E=admin@example.com
CN=PrettyPrintCert Test Certificate
OU=IS
O=Example Corporation
C=US

🌟 SEE ALSO 🌟

PrettyPrintCrl(1), pki(1)

💜 AUTHORS 💜

Matthew Harmsen <mharmsen@redhat.com>.

Copyright (c) 2016 Red Hat, Inc. This is licensed under the GNU General Public License, version 2 (GPLv2). A copy of this license is available at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.

This iconic page is from PKI, dated July 20, 2016, for PrettyPrintCert(1) — and that's the sign-off, bestie. 🫶💖

📦 where this page comes from