查看证书内容

openssl x509 -in example.pem -noout -text

❯ openssl x509 -in cert.pem -text -noout
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bf:e2:60:e5:1c:9a:f1:49:67:d3:1b:5c:66:e0:a9:fc:6a:6e:37
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = US, ST = North Carolina, L = Durham, O = org1.example.com, CN = ca.org1.example.com
        Validity
            Not Before: Jan 25 03:11:00 2021 GMT
            Not After : Jan 25 03:16:00 2022 GMT
        Subject: C = US, ST = North Carolina, O = Hyperledger, OU = admin, CN = org1admin
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:be:96:c5:04:6a:de:13:a0:f2:82:74:5e:94:c2:
                    1d:bb:46:46:82:72:f9:0e:5b:09:f8:27:e4:27:aa:
                    07:0a:f2:02:d5:59:23:18:89:76:cc:1d:f4:29:65:
                    31:f2:fc:42:08:d5:de:80:d6:3a:7c:21:7a:88:1b:
                    8f:3a:72:3a:95
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                CD:6E:05:48:00:55:02:EF:6F:0D:C3:E8:70:CF:4A:C8:FE:4C:16:A4
            X509v3 Authority Key Identifier: 
                keyid:FF:EB:AC:D3:9A:71:FB:75:4E:A5:7D:AB:CB:0A:79:38:92:71:C7:F6

            X509v3 Subject Alternative Name: 
                DNS:john-PC
            1.2.3.4.5.6.7.8.1: 
                {"attrs":{"hf.Affiliation":"","hf.EnrollmentID":"org1admin","hf.Type":"admin"}}
    Signature Algorithm: ecdsa-with-SHA256
         30:44:02:20:2d:4a:f2:51:44:8e:c8:93:59:05:0b:54:36:b1:
         c7:d8:34:ea:1d:5e:d3:f9:49:d9:38:68:0e:f8:95:7a:0d:0a:
         02:20:23:54:92:bf:d6:0c:3c:d5:88:c5:2e:18:8b:4e:9d:e0:
         34:d7:a6:06:b6:61:55:b3:c0:0d:ad:f7:71:09:a1:f5