X.509 Digital Certificates

X.509 Digital Certificates

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
X.509 Digital Certificates sushant.bhatia 03-07-2005
Posted by on March 7, 2005, 8:56 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi.

I'm trying to verify a X509 Certificate. In order to do this, I need
to get the public key, Hash & Signature stored in a X509 certificate.

I am able to get the Public Key & then the exponent & modulus.
I believe that the hash is just the "thumbprint" of the certificate.

However, I am at a total loss as to which field is the Signature? Any
ideas?

Thanks for your help.
Sushant



Posted by Edward A. Feustel on March 8, 2005, 12:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

> Hi.
>
> I'm trying to verify a X509 Certificate. In order to do this, I need
> to get the public key, Hash & Signature stored in a X509 certificate.
>
> I am able to get the Public Key & then the exponent & modulus.
> I believe that the hash is just the "thumbprint" of the certificate.
>
> However, I am at a total loss as to which field is the Signature? Any
> ideas?
>
> Thanks for your help.
> Sushant
>
>
The US has a group called the IETF. A subgroup of the IETF is called PKIX.
This subgroup is responsible for the definition and use of X.509
certificates on the internet. They have a specification that describes
version 2 and version 3 certificates and their layout. They are in the
process of standardizing the Simple Certificate Validation Protocol. You
might want to look at this.

If you are using Internet Explorer or a Mozilla browser and if the
certificate is signed by a well known certificate authority, and if you have
turned the check for valid certificate on, the program will
check for validation and if it can't validate it, you will be notified and
given a chance to look at the signature.

If you are trying to do this from C++, get the Network Security Services
library from Mozilla.org.
If you are trying to do this from Java, get both the NSS and Java Security
Services add on.
Good luck.
Ed




----== Posted via Newsfeeds.Com - Unlimited-Uncensored-Secure Usenet News==----
http://www.newsfeeds.com The #1 Newsgroup Service in the World! >100,000
Newsgroups
---= East/West-Coast Server Farms - Total Privacy via Encryption =---


Similar ThreadsPosted
Repository for digital certificates June 3, 2005, 1:50 pm
Chaining x.509 certificates April 27, 2005, 3:46 pm
Chaining x.509 certificates April 27, 2005, 3:48 pm
What are the differences between the certificates *.pfx *.p12 *.cer *.crt *.spc *.p7b ?? July 19, 2005, 2:02 pm
Wildcard SSL Certificates July 27, 2005, 10:30 am
sample X.509 certificates? February 20, 2007, 9:38 pm
Certificates Question March 27, 2007, 2:50 am
Value of SSL client certificates? October 19, 2007, 10:18 am
How to generate SSL certificates - a little howto March 22, 2005, 8:34 pm
VPN vs SSL client side certificates September 6, 2005, 12:48 pm

The site map in XML format XML site map

Contact Us | Privacy Policy