return 0;
}
-static int dict_flag_has_default(fr_dict_attr_t **da_p, UNUSED char const *value, UNUSED fr_dict_flag_parser_rule_t const *rules)
+static int dict_flag_default_value(fr_dict_attr_t **da_p, char const *value, UNUSED fr_dict_flag_parser_rule_t const *rules)
{
fr_der_attr_flags_t *flags = fr_dict_attr_ext(*da_p, FR_DICT_ATTR_EXT_PROTOCOL_SPECIFIC);
- flags->has_default = true;
+ if (!fr_type_is_leaf((*da_p)->type)) {
+ fr_strerror_printf("Cannot set 'default=...' for attribute %s DER type %s",
+ (*da_p)->name, fr_der_tag_to_str(flags->der_type));
+ return -1;
+ }
+
+ /*
+ * The default values are parented from the dict root. That way we don't need to copy the values
+ * when we clone the attribute, we can just copy the pointer.
+ */
+ flags->default_value = fr_value_box_alloc(fr_dict_unconst((*da_p)->dict), (*da_p)->type, NULL);
+ if (!flags->default_value) return -1;
+
+ if (fr_value_box_from_str(flags->default_value, flags->default_value, (*da_p)->type, NULL,
+ value, strlen(value), NULL, false) < 0) {
+ fr_strerror_printf("Failed parsing 'value=...' - %s", fr_strerror());
+ return -1;
+ }
+
+ flags->has_default_value = true;
return 0;
}
static const fr_dict_flag_parser_t der_flags[] = {
{ L("class"), { .func = dict_flag_class } },
+ { L("default"), { .func = dict_flag_default_value,.needs_value = true } },
{ L("der_type"), { .func = dict_flag_der_type, .needs_value = true } },
- { L("has_default"), { .func = dict_flag_has_default } },
{ L("is_extensions"), { .func = dict_flag_is_extensions } },
{ L("is_oid_leaf"), { .func = dict_flag_is_oid_leaf } },
{ L("max"), { .func = dict_flag_max, .needs_value = true } },
#include <freeradius-devel/build.h>
#include <freeradius-devel/util/dict.h>
-#include <freeradius-devel/util/types.h>
+#include <freeradius-devel/util/value.h>
extern HIDDEN fr_dict_t const *dict_der;
union {
fr_der_tag_t sequence_of;
fr_der_tag_t set_of;
+ fr_value_box_t *default_value;
};
uint64_t max; //!< maximum count of items in a sequence, set, or string.
uint32_t restrictions; //!< for choice of options and tags - no dups allowed
bool optional : 1; //!< optional, we MUST already have set 'option'
bool is_sequence_of : 1; //!< sequence_of has been defined
bool is_set_of : 1; //!< set_of has been defined
- bool is_oid_and_value : 1; //!< is OID+value
+ bool is_oid_and_value : 1; //!< is OID+value
bool is_extensions : 1; //!< a list of X.509 extensions
- bool has_default : 1; //!< a default value exists
+ bool has_default_value : 1; //!< a default value exists
bool is_oid_leaf : 1;
bool is_choice : 1; //!< DER name "choice".
} fr_der_attr_flags_t;
+
static inline fr_der_attr_flags_t const *fr_der_attr_flags(fr_dict_attr_t const *da)
{
return fr_dict_attr_ext(da, FR_DICT_ATTR_EXT_PROTOCOL_SPECIFIC);
#define fr_der_flag_max(_da) (fr_der_attr_flags(_da)->max)
#define fr_der_flag_is_oid_and_value(_da) (fr_der_attr_flags(_da)->is_oid_and_value)
#define fr_der_flag_is_extensions(_da) (fr_der_attr_flags(_da)->is_extensions)
-#define fr_der_flag_has_default(_da) (fr_der_attr_flags(_da)->has_default)
+#define fr_der_flag_has_default_value(_da) ((fr_der_attr_flags(_da)->has_default_value) != NULL);
#define fr_der_flag_is_oid_leaf(_da) (fr_der_attr_flags(_da)->is_oid_leaf)
#define fr_der_flag_is_choice(_da) (fr_der_attr_flags(_da)->is_choice)
match Certificate = { tbsCertificate = { version = { number = 2 }, serialNumber = 0x0a0141420000015385736a0b85eca708, signature = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-1 = { sha256WithRSAEncryption = no } } } } } } }, issuer = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Digital Signature Trust Co." } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { commonName = "DST Root CA X3" } } } } } }, validity = { notBefore = "2016-03-17T16:40:46Z", notAfter = "2021-03-17T16:40:46Z" }, subject = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Let's Encrypt" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { commonName = "Let's Encrypt Authority X3" } } } } } }, subjectPublicKeyInfo = { algorithm = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-1 = { rsaEncryption = no } } } } } } }, subjectPublicKey = 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 }, extensions = { Critical = { joint-iso-itu-t = { ds = { certificateExtension = { basicConstraints = { cA = yes, pathLenConstraint = 0 } } } }, joint-iso-itu-t = { ds = { certificateExtension = { keyUsage = { digitalSignature = yes, nonRepudation = no, keyEncipherment = no, dataEncipherment = no, keyAgreement = no, keyCertSign = yes, cRLSign = yes, encipherOnly = no } } } } }, iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { pe = { authorityInfoAccess = { accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.1", accessLocation = { uniformResourceIdentifier = "http://isrg.trustid.ocsp.identrust.com" } }, accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.2", accessLocation = { uniformResourceIdentifier = "http://apps.identrust.com/roots/dstrootcax3.p7c" } } } } } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { authorityKeyIdentifier = { keyIdentifier = 0xc4a7b1a47b2c71fadbe14b9075ffc41560858910 } } } }, joint-iso-itu-t = { ds = { certificateExtension = { certificatePolicies = { policyInformation = { policyIdentifier = "2.23.140.1.2.1" }, policyInformation = { policyIdentifier = "1.3.6.1.4.1.44947.1.1.1", policyQualifiers = { policyQualifierInfo = { iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { qualifier = { cpsuri = "http://cps.root-x1.letsencrypt.org" } } } } } } } } } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { CRLDIstributionPoints = { distributionPoint = { distributionPointName = { fullName = { uniformResourceIdentifier = "http://crl.identrust.com/DSTROOTCAX3CRL.crl" } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectKeyIdentifier = 0xa84a6a63047dddbae6d139b7a64565eff3a8eca1 } } } } }, signatureAlgorithm = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-1 = { sha256WithRSAEncryption = no } } } } } } }, signature = 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 }
decode-pair 30 82 06 17 30 82 05 9d a0 03 02 01 02 02 13 33 00 00 4a 3e 86 50 65 e6 81 d8 c8 7b 00 00 00 00 4a 3e 30 0a 06 08 2a 86 48 ce 3d 04 03 03 30 5d 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2e 30 2c 06 03 55 04 03 13 25 4d 69 63 72 6f 73 6f 66 74 20 41 7a 75 72 65 20 45 43 43 20 54 4c 53 20 49 73 73 75 69 6e 67 20 43 41 20 30 37 30 1e 17 0d 32 34 31 30 32 38 32 30 33 33 31 33 5a 17 0d 32 35 31 30 32 33 32 30 33 33 31 33 5a 30 6a 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 0b 30 09 06 03 55 04 08 13 02 57 41 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 1c 30 1a 06 03 55 04 03 13 13 6c 65 61 72 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 30 59 30 13 06 07 2a 86 48 ce 3d 02 01 06 08 2a 86 48 ce 3d 03 01 07 03 42 00 04 bc 91 b5 25 05 f2 a2 1e fe 02 23 22 ca 02 53 34 1e e9 96 07 3d fd 10 f9 f7 d3 0e bd af e3 c3 fb a7 9f 3e f7 e8 cc be 9c f2 99 a5 15 d2 79 e3 a0 43 9c 03 c9 c1 90 eb 2a a6 3e f8 ac 45 7c 26 07 a3 82 04 2d 30 82 04 29 30 82 01 7d 06 0a 2b 06 01 04 01 d6 79 02 04 02 04 82 01 6d 04 82 01 69 01 67 00 76 00 12 f1 4e 34 bd 53 72 4c 84 06 19 c3 8f 3f 7a 13 f8 e7 b5 62 87 88 9c 6d 30 05 84 eb e5 86 26 3a 00 00 01 92 d4 de 62 25 00 00 04 03 00 47 30 45 02 21 00 f1 c1 0a 24 64 e5 ec b6 63 1b 35 ec 32 0a 41 02 2c 63 75 91 d1 12 cd f0 8b 1c 8a 75 2e 48 c2 41 02 20 4a 35 b1 ab 4f 35 b1 bb aa 71 a2 e1 44 d7 e8 d4 47 6f 87 a7 fa 5a 95 98 16 50 6c 34 53 72 9c e1 00 76 00 7d 59 1e 12 e1 78 2a 7b 1c 61 67 7c 5e fd f8 d0 87 5c 14 a0 4e 95 9e b9 03 2f d9 0e 8c 2e 79 b8 00 00 01 92 d4 de 60 f7 00 00 04 03 00 47 30 45 02 20 30 e3 c4 ca a6 39 19 84 0a ff 5e f8 e5 5e f4 72 1c 6e da 63 a0 ab 00 01 c7 12 06 7b 22 3a 0f ec 02 21 00 80 5f ad 84 78 fc e7 52 c5 d3 c4 ab 5f 24 f2 7d 5c 7b e7 94 70 54 e6 22 de 5b b0 e6 30 bd c4 ac 00 75 00 1a 04 ff 49 d0 54 1d 40 af f6 a0 c3 bf f1 d8 c4 67 2f 4e ec ee 23 40 68 98 6b 17 40 2e dc 89 7d 00 00 01 92 d4 de 61 05 00 00 04 03 00 46 30 44 02 20 7b d6 d9 a2 f2 8b 48 31 96 7b fe af 5e d3 12 3c 7b 1e 89 af 6a 33 12 2c ce 5a cf 65 fc 5d f5 00 02 20 36 7e 05 ab 77 f6 f8 f1 42 fa cd b6 b2 8d f6 97 7a b5 2c 3a 6b 00 8b c3 50 a3 5e ba 86 32 16 5b 30 27 06 09 2b 06 01 04 01 82 37 15 0a 04 1a 30 18 30 0a 06 08 2b 06 01 05 05 07 03 02 30 0a 06 08 2b 06 01 05 05 07 03 01 30 3c 06 09 2b 06 01 04 01 82 37 15 07 04 2f 30 2d 06 25 2b 06 01 04 01 82 37 15 08 87 bd d7 1b 81 e7 eb 46 82 81 9d 2e 8e d0 0c 87 f0 da 1d 5d 82 84 e5 69 82 f3 a7 3e 02 01 64 02 01 26 30 81 b4 06 08 2b 06 01 05 05 07 01 01 04 81 a7 30 81 a4 30 73 06 08 2b 06 01 05 05 07 30 02 86 67 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 6f 70 73 2f 63 65 72 74 73 2f 4d 69 63 72 6f 73 6f 66 74 25 32 30 41 7a 75 72 65 25 32 30 45 43 43 25 32 30 54 4c 53 25 32 30 49 73 73 75 69 6e 67 25 32 30 43 41 25 32 30 30 37 25 32 30 2d 25 32 30 78 73 69 67 6e 2e 63 72 74 30 2d 06 08 2b 06 01 05 05 07 30 01 86 21 68 74 74 70 3a 2f 2f 6f 6e 65 6f 63 73 70 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 6f 63 73 70 30 1d 06 03 55 1d 0e 04 16 04 14 66 04 97 38 47 6c 00 11 7e 16 74 57 b7 8b 2e ae 04 33 2c 56 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 07 80 30 37 06 03 55 1d 11 04 30 30 2e 82 17 77 77 77 2e 6c 65 61 72 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 82 13 6c 65 61 72 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 30 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 6a 06 03 55 1d 1f 04 63 30 61 30 5f a0 5d a0 5b 86 59 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 6f 70 73 2f 63 72 6c 2f 4d 69 63 72 6f 73 6f 66 74 25 32 30 41 7a 75 72 65 25 32 30 45 43 43 25 32 30 54 4c 53 25 32 30 49 73 73 75 69 6e 67 25 32 30 43 41 25 32 30 30 37 2e 63 72 6c 30 66 06 03 55 1d 20 04 5f 30 5d 30 51 06 0c 2b 06 01 04 01 82 37 4c 83 7d 01 01 30 41 30 3f 06 08 2b 06 01 05 05 07 02 01 16 33 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 6f 70 73 2f 44 6f 63 73 2f 52 65 70 6f 73 69 74 6f 72 79 2e 68 74 6d 30 08 06 06 67 81 0c 01 02 02 30 1f 06 03 55 1d 23 04 18 30 16 80 14 c3 5e ac 40 76 c0 06 4d e3 2b 94 99 30 60 73 34 98 29 c6 51 30 1d 06 03 55 1d 25 04 16 30 14 06 08 2b 06 01 05 05 07 03 02 06 08 2b 06 01 05 05 07 03 01 30 0a 06 08 2a 86 48 ce 3d 04 03 03 03 68 00 30 65 02 30 46 da 82 e0 40 1e ed a2 71 cc 45 24 5c 26 fa 80 91 a8 cf 49 32 a7 1c 81 f2 79 24 7a de dd 19 bc 62 8d 8a bf e1 9a cd d6 f4 16 b1 e1 56 2d 23 9d 02 31 00 97 18 e1 45 9e f9 3b cb 67 c0 6e 38 86 70 ab 38 49 93 ad e2 26 b0 d0 73 36 ba 53 46 d0 8f 3f ca 55 3e 9c df f5 f4 0e a3 67 e1 cc fe a9 a3 50 89
-match Certificate = { tbsCertificate = { version = { number = 2 }, serialNumber = 0x3300004a3e865065e681d8c87b000000004a3e, signature = { iso = { member-body = { us = { ansi-x962 = { signatures = { ecdsa-with-SHA2 = { ecdsa-with-SHA384 = ::DEFAULT } } } } } } }, issuer = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Microsoft Corporation" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { commonName = "Microsoft Azure ECC TLS Issuing CA 07" } } } } } }, validity = { notBefore = "2024-10-28T20:33:13Z", notAfter = "2025-10-23T20:33:13Z" }, subject = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "WA" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "Redmond" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Microsoft Corporation" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { commonName = "learn.microsoft.com" } } } } } }, subjectPublicKeyInfo = { algorithm = { iso = { member-body = { us = { ansi-x962 = { keyType = { ecPublicKey = "1.2.840.10045.3.1.7" } } } } } }, subjectPublicKey = 0x0004bc91b52505f2a21efe022322ca0253341ee996073dfd10f9f7d30ebdafe3c3fba79f3ef7e8ccbe9cf299a515d279e3a0439c03c9c190eb2aa63ef8ac457c2607 }, extensions = { Critical = { joint-iso-itu-t = { ds = { certificateExtension = { keyUsage = { digitalSignature = yes, nonRepudation = no, keyEncipherment = no, dataEncipherment = no, keyAgreement = no, keyCertSign = no, cRLSign = no, encipherOnly = no } } } }, joint-iso-itu-t = { ds = { certificateExtension = { basicConstraints = { cA = ::DEFAULT } } } } }, iso = { identified-organization = { dod = { internet = { raw.4 = { raw.1 = { raw.11129 = { raw.2 = { raw.4 = { raw.2 = 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 } } } } } } } } }, iso = { identified-organization = { dod = { internet = { raw.4 = { raw.1 = { raw.311 = { raw.21 = { raw.10 = 0x3018300a06082b06010505070302300a06082b06010505070301 } } } } } } } }, iso = { identified-organization = { dod = { internet = { raw.4 = { raw.1 = { raw.311 = { raw.21 = { raw.7 = 0x302d06252b060104018237150887bdd71b81e7eb4682819d2e8ed00c87f0da1d5d8284e56982f3a73e020164020126 } } } } } } } }, iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { pe = { authorityInfoAccess = { accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.2", accessLocation = { uniformResourceIdentifier = "http://www.microsoft.com/pkiops/certs/Microsoft\%20Azure\%20ECC\%20TLS\%20Issuing\%20CA\%2007\%20-\%20xsign.crt" } }, accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.1", accessLocation = { uniformResourceIdentifier = "http://oneocsp.microsoft.com/ocsp" } } } } } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectKeyIdentifier = 0x66049738476c00117e167457b78b2eae04332c56 } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectAltName = { dNSName = "www.learn.microsoft.com", dNSName = "learn.microsoft.com" } } } }, joint-iso-itu-t = { ds = { certificateExtension = { CRLDIstributionPoints = { distributionPoint = { distributionPointName = { fullName = { uniformResourceIdentifier = "http://www.microsoft.com/pkiops/crl/Microsoft\%20Azure\%20ECC\%20TLS\%20Issuing\%20CA\%2007.crl" } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { certificatePolicies = { policyInformation = { policyIdentifier = "1.3.6.1.4.1.311.76.509.1.1", policyQualifiers = { policyQualifierInfo = { iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { qualifier = { cpsuri = "http://www.microsoft.com/pkiops/Docs/Repository.htm" } } } } } } } } } } }, policyInformation = { policyIdentifier = "2.23.140.1.2.2" } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { authorityKeyIdentifier = { keyIdentifier = 0xc35eac4076c0064de32b9499306073349829c651 } } } }, joint-iso-itu-t = { ds = { certificateExtension = { extKeyUsage = { keyPurposeId = "1.3.6.1.5.5.7.3.2", keyPurposeId = "1.3.6.1.5.5.7.3.1" } } } } } }, signatureAlgorithm = { iso = { member-body = { us = { ansi-x962 = { signatures = { ecdsa-with-SHA2 = { ecdsa-with-SHA384 = ::DEFAULT } } } } } } }, signature = 0x003065023046da82e0401eeda271cc45245c26fa8091a8cf4932a71c81f279247adedd19bc628d8abfe19acdd6f416b1e1562d239d0231009718e1459ef93bcb67c06e388670ab384993ade226b0d07336ba5346d08f3fca553e9cdff5f40ea367e1ccfea9a35089 }
+match Certificate = { tbsCertificate = { version = { number = 2 }, serialNumber = 0x3300004a3e865065e681d8c87b000000004a3e, signature = { iso = { member-body = { us = { ansi-x962 = { signatures = { ecdsa-with-SHA2 = { ecdsa-with-SHA384 = no } } } } } } }, issuer = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Microsoft Corporation" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { commonName = "Microsoft Azure ECC TLS Issuing CA 07" } } } } } }, validity = { notBefore = "2024-10-28T20:33:13Z", notAfter = "2025-10-23T20:33:13Z" }, subject = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "WA" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "Redmond" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Microsoft Corporation" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { commonName = "learn.microsoft.com" } } } } } }, subjectPublicKeyInfo = { algorithm = { iso = { member-body = { us = { ansi-x962 = { keyType = { ecPublicKey = "1.2.840.10045.3.1.7" } } } } } }, subjectPublicKey = 0x0004bc91b52505f2a21efe022322ca0253341ee996073dfd10f9f7d30ebdafe3c3fba79f3ef7e8ccbe9cf299a515d279e3a0439c03c9c190eb2aa63ef8ac457c2607 }, extensions = { Critical = { joint-iso-itu-t = { ds = { certificateExtension = { keyUsage = { digitalSignature = yes, nonRepudation = no, keyEncipherment = no, dataEncipherment = no, keyAgreement = no, keyCertSign = no, cRLSign = no, encipherOnly = no } } } }, joint-iso-itu-t = { ds = { certificateExtension = { basicConstraints = { cA = no } } } } }, iso = { identified-organization = { dod = { internet = { raw.4 = { raw.1 = { raw.11129 = { raw.2 = { raw.4 = { raw.2 = 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 } } } } } } } } }, iso = { identified-organization = { dod = { internet = { raw.4 = { raw.1 = { raw.311 = { raw.21 = { raw.10 = 0x3018300a06082b06010505070302300a06082b06010505070301 } } } } } } } }, iso = { identified-organization = { dod = { internet = { raw.4 = { raw.1 = { raw.311 = { raw.21 = { raw.7 = 0x302d06252b060104018237150887bdd71b81e7eb4682819d2e8ed00c87f0da1d5d8284e56982f3a73e020164020126 } } } } } } } }, iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { pe = { authorityInfoAccess = { accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.2", accessLocation = { uniformResourceIdentifier = "http://www.microsoft.com/pkiops/certs/Microsoft\%20Azure\%20ECC\%20TLS\%20Issuing\%20CA\%2007\%20-\%20xsign.crt" } }, accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.1", accessLocation = { uniformResourceIdentifier = "http://oneocsp.microsoft.com/ocsp" } } } } } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectKeyIdentifier = 0x66049738476c00117e167457b78b2eae04332c56 } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectAltName = { dNSName = "www.learn.microsoft.com", dNSName = "learn.microsoft.com" } } } }, joint-iso-itu-t = { ds = { certificateExtension = { CRLDIstributionPoints = { distributionPoint = { distributionPointName = { fullName = { uniformResourceIdentifier = "http://www.microsoft.com/pkiops/crl/Microsoft\%20Azure\%20ECC\%20TLS\%20Issuing\%20CA\%2007.crl" } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { certificatePolicies = { policyInformation = { policyIdentifier = "1.3.6.1.4.1.311.76.509.1.1", policyQualifiers = { policyQualifierInfo = { iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { qualifier = { cpsuri = "http://www.microsoft.com/pkiops/Docs/Repository.htm" } } } } } } } } } } }, policyInformation = { policyIdentifier = "2.23.140.1.2.2" } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { authorityKeyIdentifier = { keyIdentifier = 0xc35eac4076c0064de32b9499306073349829c651 } } } }, joint-iso-itu-t = { ds = { certificateExtension = { extKeyUsage = { keyPurposeId = "1.3.6.1.5.5.7.3.2", keyPurposeId = "1.3.6.1.5.5.7.3.1" } } } } } }, signatureAlgorithm = { iso = { member-body = { us = { ansi-x962 = { signatures = { ecdsa-with-SHA2 = { ecdsa-with-SHA384 = no } } } } } } }, signature = 0x003065023046da82e0401eeda271cc45245c26fa8091a8cf4932a71c81f279247adedd19bc628d8abfe19acdd6f416b1e1562d239d0231009718e1459ef93bcb67c06e388670ab384993ade226b0d07336ba5346d08f3fca553e9cdff5f40ea367e1ccfea9a35089 }
decode-pair 30 82 06 22 30 82 05 0a a0 03 02 01 02 02 14 04 63 6f 8c 80 f7 fc f6 c2 53 c3 b1 e5 1a 9f 83 90 21 63 b6 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 75 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 0c 0a 43 61 6c 69 66 6f 72 6e 69 61 31 16 30 14 06 03 55 04 07 0c 0d 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 31 15 30 13 06 03 55 04 0a 0c 0c 45 78 61 6d 70 6c 65 20 43 6f 72 70 31 22 30 20 06 09 2a 86 48 86 f7 0d 01 09 01 16 13 65 78 61 6d 70 6c 65 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 30 1e 17 0d 32 35 30 31 31 37 31 35 31 30 34 31 5a 17 0d 32 35 30 32 31 36 31 35 31 30 34 31 5a 30 75 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 0c 0a 43 61 6c 69 66 6f 72 6e 69 61 31 16 30 14 06 03 55 04 07 0c 0d 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 31 15 30 13 06 03 55 04 0a 0c 0c 45 78 61 6d 70 6c 65 20 43 6f 72 70 31 22 30 20 06 09 2a 86 48 86 f7 0d 01 09 01 16 13 65 78 61 6d 70 6c 65 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 c8 fe a4 8b f8 64 a8 ff 53 1d a1 9e bf b9 0f bd 64 b3 51 f0 bb ed bb b2 a6 0e 8d 64 9f 0c 88 e5 20 11 8a a2 57 af bc d0 ae 33 90 ad 55 e3 b7 f3 56 e6 ba 53 4c 59 a9 40 ce 49 bf de 50 61 95 e1 a5 29 c7 c6 55 3b 90 70 37 e7 7a 40 8d 4b 41 5c 56 0f 26 20 c7 53 8b d5 f8 3d 29 6a 45 7c ff d6 da d4 9d 97 b7 12 9e 55 48 4d 6a 96 c4 fe 13 8a 55 0a 5c 23 13 32 e1 84 99 37 08 c3 e0 1d 0d fc be 37 0b e1 1c be 42 bc 99 2f 33 c6 4c c0 0e 04 77 61 9f 22 91 9f 1c ba c5 23 30 e5 73 c0 8b c1 77 d4 c1 1a b7 24 1e 7d c2 81 41 20 62 89 41 05 2f d3 4e a8 c8 92 1f dd d1 03 31 05 0f a0 ce 6d 28 a4 e9 ff cb d1 7d 27 c9 08 aa 2c 87 04 ea b5 f3 1d 6e 98 ad 80 aa a6 49 ca e8 83 08 58 63 f5 8c 02 42 ba 66 26 bb 6a 44 29 eb 88 ab 13 04 7c 58 ed 07 56 54 2b d6 f8 28 73 3a ad 33 ae 37 8b 02 03 01 00 01 a3 82 02 a8 30 82 02 a4 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 03 a8 30 1d 06 03 55 1d 25 04 16 30 14 06 08 2b 06 01 05 05 07 03 01 06 08 2b 06 01 05 05 07 03 02 30 0f 06 03 55 1d 13 01 01 ff 04 05 30 03 01 01 ff 30 27 06 03 55 1d 11 04 20 30 1e 82 0b 65 78 61 6d 70 6c 65 2e 63 6f 6d 82 0f 77 77 77 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 30 27 06 03 55 1d 1f 04 20 30 1e 30 1c a0 1a a0 18 86 16 68 74 74 70 3a 2f 2f 65 78 61 6d 70 6c 65 2e 63 6f 6d 2f 63 72 6c 30 33 06 08 2b 06 01 05 05 07 01 01 04 27 30 25 30 23 06 08 2b 06 01 05 05 07 30 01 86 17 68 74 74 70 3a 2f 2f 65 78 61 6d 70 6c 65 2e 63 6f 6d 2f 6f 63 73 70 30 1d 06 03 55 1d 0e 04 16 04 14 d1 ae 81 f4 07 4f ed 5a be 29 c7 1a 17 91 54 cd d3 9e 1a 1a 30 81 9c 06 03 55 1d 23 04 81 94 30 81 91 a1 79 a4 77 30 75 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 0c 0a 43 61 6c 69 66 6f 72 6e 69 61 31 16 30 14 06 03 55 04 07 0c 0d 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 31 15 30 13 06 03 55 04 0a 0c 0c 45 78 61 6d 70 6c 65 20 43 6f 72 70 31 22 30 20 06 09 2a 86 48 86 f7 0d 01 09 01 16 13 65 78 61 6d 70 6c 65 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 82 14 04 63 6f 8c 80 f7 fc f6 c2 53 c3 b1 e5 1a 9f 83 90 21 63 b6 30 7c 06 03 55 1d 20 04 75 30 73 30 71 06 04 2a 03 04 05 30 69 30 22 06 08 2b 06 01 05 05 07 02 01 16 16 68 74 74 70 3a 2f 2f 65 78 61 6d 70 6c 65 2e 63 6f 6d 2f 63 70 73 30 43 06 08 2b 06 01 05 05 07 02 02 30 37 30 21 1a 11 4f 72 67 61 6e 69 73 61 74 69 6f 6e 20 4e 61 6d 65 30 0c 02 01 01 02 01 02 02 01 03 02 01 04 1a 12 45 78 70 6c 69 63 69 74 20 54 65 78 74 20 48 65 72 65 30 27 06 03 55 1d 12 04 20 30 1e 82 0b 65 78 61 6d 70 6c 65 2e 63 6f 6d 82 0f 77 77 77 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 30 33 06 03 55 1d 1c 01 01 ff 04 29 30 27 a0 1e a0 1c 86 1a 68 74 74 70 3a 2f 2f 6d 79 68 6f 73 74 2e 63 6f 6d 2f 6d 79 63 61 2e 63 72 6c 83 02 05 60 84 01 ff 30 0c 06 03 55 1d 24 04 05 30 03 80 01 01 30 0a 06 03 55 1d 36 04 03 02 01 02 30 27 06 08 2b 06 01 05 05 07 01 0b 04 1b 30 19 30 17 06 08 2b 06 01 05 05 07 30 02 86 0b 65 78 61 6d 70 6c 65 2e 63 6f 6d 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 6a 02 d2 76 67 ba 04 a4 c5 fd ea d5 4f 42 ff 2e 63 b9 89 0a 28 a3 6f 51 3a 2f 48 df a3 30 58 ab 82 6a d3 be 45 2f c9 db 50 d0 f5 b7 d7 e9 77 85 23 e4 44 65 63 1d 1f 31 61 8b 69 85 e2 3c c5 15 a9 23 dd d4 b5 2a bc 7a ea 77 e7 22 eb e0 20 a1 30 0b 11 dc 98 d4 d7 1a 03 98 10 25 66 7d af 2d 9e 89 01 db 35 0e 86 f9 b6 d9 f5 ee 1e 20 b3 8c 4c 05 bf eb 04 2b 2c da a3 b5 58 2d 26 8a 97 43 df 2d 4e 56 e8 c5 d7 86 f3 08 71 e8 ca 17 6f 66 fc 96 8e c6 b8 c8 13 0d 42 a4 18 6e a6 2a 06 73 4a 50 21 fa 7a 3f d3 35 25 bc 45 87 bf e9 27 10 2b 99 55 9f b6 01 c5 e0 8a 4f 8b 49 00 32 ed 4c fa 50 b0 53 8f a3 79 c4 66 d5 5b 54 c3 ee 93 77 24 db 4c 8d e8 58 ec a8 64 f5 91 9c d5 94 29 11 fc 8e 3c 32 fc a5 d2 4d 4d 17 85 e8 3c a4 dd ff 64 94 0d 0d 6f 1f f8 64 87 2a 8b 15 8d 04 e6 62
match Certificate = { tbsCertificate = { version = { number = 2 }, serialNumber = 0x04636f8c80f7fcf6c253c3b1e51a9f83902163b6, signature = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-1 = { sha256WithRSAEncryption = no } } } } } } }, issuer = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "California" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "San Francisco" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Example Corp" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { iso = { member-body = { us = { rsadsi = { pkcs = { raw.9 = { raw.1 = 0x16136578616d706c65406578616d706c652e636f6d } } } } } } } } }, validity = { notBefore = "2025-01-17T15:10:41Z", notAfter = "2025-02-16T15:10:41Z" }, subject = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "California" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "San Francisco" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Example Corp" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { iso = { member-body = { us = { rsadsi = { pkcs = { raw.9 = { raw.1 = 0x16136578616d706c65406578616d706c652e636f6d } } } } } } } } }, subjectPublicKeyInfo = { algorithm = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-1 = { rsaEncryption = no } } } } } } }, subjectPublicKey = 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 }, extensions = { Critical = { joint-iso-itu-t = { ds = { certificateExtension = { keyUsage = { digitalSignature = yes, nonRepudation = no, keyEncipherment = yes, dataEncipherment = no, keyAgreement = yes, keyCertSign = no, cRLSign = no, encipherOnly = no } } } }, joint-iso-itu-t = { ds = { certificateExtension = { basicConstraints = { cA = yes } } } }, joint-iso-itu-t = { ds = { certificateExtension = { raw.28 = 0x3027a01ea01c861a687474703a2f2f6d79686f73742e636f6d2f6d7963612e63726c830205608401ff } } } }, joint-iso-itu-t = { ds = { certificateExtension = { extKeyUsage = { keyPurposeId = "1.3.6.1.5.5.7.3.1", keyPurposeId = "1.3.6.1.5.5.7.3.2" } } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectAltName = { dNSName = "example.com", dNSName = "www.example.com" } } } }, joint-iso-itu-t = { ds = { certificateExtension = { CRLDIstributionPoints = { distributionPoint = { distributionPointName = { fullName = { uniformResourceIdentifier = "http://example.com/crl" } } } } } } }, iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { pe = { authorityInfoAccess = { accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.1", accessLocation = { uniformResourceIdentifier = "http://example.com/ocsp" } } } } } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectKeyIdentifier = 0xd1ae81f4074fed5abe29c71a179154cdd39e1a1a } } }, joint-iso-itu-t = { ds = { certificateExtension = { authorityKeyIdentifier = { authorityCertIssuer = { directoryName = { RDNSequence = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "California" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "San Francisco" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Example Corp" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { iso = { member-body = { us = { rsadsi = { pkcs = { raw.9 = { raw.1 = 0x16136578616d706c65406578616d706c652e636f6d } } } } } } } } } } }, authorityCertSerialNumber = 0x04636f8c80f7fcf6c253c3b1e51a9f83902163b6 } } } }, joint-iso-itu-t = { ds = { certificateExtension = { certificatePolicies = { policyInformation = { policyIdentifier = "1.2.3.4.5", policyQualifiers = { policyQualifierInfo = { iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { qualifier = { cpsuri = "http://example.com/cps" } } } } } } } } }, policyQualifierInfo = { iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { qualifier = { userNotice = { noticeRef = { explicitText = "Organisation Name", noticeNumbers = { number = 1, number = 2, number = 3, number = 4 } } } } } } } } } } } } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { issuerAltName = { dNSName = "example.com", dNSName = "www.example.com" } } } }, joint-iso-itu-t = { ds = { certificateExtension = { policyConstraints = { requireExplicitPolicy = 0x01 } } } }, joint-iso-itu-t = { ds = { certificateExtension = { inhibitAnyPolicy = 2 } } }, iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { pe = { subjectInfoAccess = { accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.2", accessLocation = { uniformResourceIdentifier = "example.com" } } } } } } } } } } } } }, signatureAlgorithm = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-1 = { sha256WithRSAEncryption = no } } } } } } }, signature = 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 }
proto-dictionary der
-encode-pair Certificate = { tbsCertificate = { version = { number = 2 }, serialNumber = 0x3300004a3e865065e681d8c87b000000004a3e, signature = { iso = { member-body = { us = { ansi-x962 = { signatures = { ecdsa-with-SHA2 = { ecdsa-with-SHA384 = ::DEFAULT } } } } } } }, issuer = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Microsoft Corporation" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { commonName = "Microsoft Azure ECC TLS Issuing CA 07" } } } } } }, validity = { notBefore = "2024-10-28T20:33:13Z", notAfter = "2025-10-23T20:33:13Z" }, subject = { RelativeDistinguishedName = { AttributeTypeandValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeandValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "WA" } } } } }, RelativeDistinguishedName = { AttributeTypeandValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "Redmond" } } } } }, RelativeDistinguishedName = { AttributeTypeandValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Microsoft Corporation" } } } } }, RelativeDistinguishedName = { AttributeTypeandValue = { joint-iso-itu-t = { ds = { attributeType = { commonName = "learn.microsoft.com" } } } } } }, subjectPublicKeyInfo = { algorithm = { iso = { member-body = { us = { ansi-x962 = { keyType = { ecPublicKey = "1.2.840.10045.3.1.7" } } } } } }, subjectPublicKey = 0x0004bc91b52505f2a21efe022322ca0253341ee996073dfd10f9f7d30ebdafe3c3fba79f3ef7e8ccbe9cf299a515d279e3a0439c03c9c190eb2aa63ef8ac457c2607 }, extensions = { Critical = { joint-iso-itu-t = { ds = { certificateExtension = { keyUsage = { digitalSignature = yes, nonRepudation = no, keyEncipherment = no, dataEncipherment = no, keyAgreement = no, keyCertSign = no, cRLSign = no, encipherOnly = no } } } }, joint-iso-itu-t = { ds = { certificateExtension = { basicConstraints = { cA = ::DEFAULT } } } } }, iso = { identified-organization = { dod = { internet = { raw.4 = { raw.1 = { raw.11129 = { raw.2 = { raw.4 = { raw.2 = 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 } } } } } } } } }, iso = { identified-organization = { dod = { internet = { raw.4 = { raw.1 = { raw.311 = { raw.21 = { raw.10 = 0x3018300a06082b06010505070302300a06082b06010505070301 } } } } } } } }, iso = { identified-organization = { dod = { internet = { raw.4 = { raw.1 = { raw.311 = { raw.21 = { raw.7 = 0x302d06252b060104018237150887bdd71b81e7eb4682819d2e8ed00c87f0da1d5d8284e56982f3a73e020164020126 } } } } } } } }, iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { pe = { authorityInfoAccess = { accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.2", accessLocation = { uniformResourceIdentifier = "http://www.microsoft.com/pkiops/certs/Microsoft\%20Azure\%20ECC\%20TLS\%20Issuing\%20CA\%2007\%20-\%20xsign.crt" } }, accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.1", accessLocation = { uniformResourceIdentifier = "http://oneocsp.microsoft.com/ocsp" } } } } } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectKeyIdentifier = 0x66049738476c00117e167457b78b2eae04332c56 } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectAltName = { dNSName = "www.learn.microsoft.com", dNSName = "learn.microsoft.com" } } } }, joint-iso-itu-t = { ds = { certificateExtension = { cRLDIstributionPoints = { distributionPoint = { distributionPointName = { fullName = { uniformResourceIdentifier = "http://www.microsoft.com/pkiops/crl/Microsoft\%20Azure\%20ECC\%20TLS\%20Issuing\%20CA\%2007.crl" } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { certificatePolicies = { policyInformation = { policyIdentifier = "1.3.6.1.4.1.311.76.509.1.1", policyQualifiers = { policyQualifierInfo = { iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { raw.2 = { raw.1 = 0x1633687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b696f70732f446f63732f5265706f7369746f72792e68746d } } } } } } } } } } }, policyInformation = { policyIdentifier = "2.23.140.1.2.2" } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { authorityKeyIdentifier = { keyIdentifier = 0xc35eac4076c0064de32b9499306073349829c651 } } } }, joint-iso-itu-t = { ds = { certificateExtension = { extKeyUsage = { keyPurposeId = "1.3.6.1.5.5.7.3.2", keyPurposeId = "1.3.6.1.5.5.7.3.1" } } } } } }, signatureAlgorithm = { iso = { member-body = { us = { ansi-x962 = { signatures = { ecdsa-with-SHA2 = { ecdsa-with-SHA384 = ::DEFAULT } } } } } } }, signature = 0x003065023046da82e0401eeda271cc45245c26fa8091a8cf4932a71c81f279247adedd19bc628d8abfe19acdd6f416b1e1562d239d0231009718e1459ef93bcb67c06e388670ab384993ade226b0d07336ba5346d08f3fca553e9cdff5f40ea367e1ccfea9a35089 }
+encode-pair Certificate = { tbsCertificate = { version = { number = 2 }, serialNumber = 0x3300004a3e865065e681d8c87b000000004a3e, signature = { iso = { member-body = { us = { ansi-x962 = { signatures = { ecdsa-with-SHA2 = { ecdsa-with-SHA384 = no } } } } } } }, issuer = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Microsoft Corporation" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { commonName = "Microsoft Azure ECC TLS Issuing CA 07" } } } } } }, validity = { notBefore = "2024-10-28T20:33:13Z", notAfter = "2025-10-23T20:33:13Z" }, subject = { RelativeDistinguishedName = { AttributeTypeandValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeandValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "WA" } } } } }, RelativeDistinguishedName = { AttributeTypeandValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "Redmond" } } } } }, RelativeDistinguishedName = { AttributeTypeandValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Microsoft Corporation" } } } } }, RelativeDistinguishedName = { AttributeTypeandValue = { joint-iso-itu-t = { ds = { attributeType = { commonName = "learn.microsoft.com" } } } } } }, subjectPublicKeyInfo = { algorithm = { iso = { member-body = { us = { ansi-x962 = { keyType = { ecPublicKey = "1.2.840.10045.3.1.7" } } } } } }, subjectPublicKey = 0x0004bc91b52505f2a21efe022322ca0253341ee996073dfd10f9f7d30ebdafe3c3fba79f3ef7e8ccbe9cf299a515d279e3a0439c03c9c190eb2aa63ef8ac457c2607 }, extensions = { Critical = { joint-iso-itu-t = { ds = { certificateExtension = { keyUsage = { digitalSignature = yes, nonRepudation = no, keyEncipherment = no, dataEncipherment = no, keyAgreement = no, keyCertSign = no, cRLSign = no, encipherOnly = no } } } }, joint-iso-itu-t = { ds = { certificateExtension = { basicConstraints = { cA = no } } } } }, iso = { identified-organization = { dod = { internet = { raw.4 = { raw.1 = { raw.11129 = { raw.2 = { raw.4 = { raw.2 = 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 } } } } } } } } }, iso = { identified-organization = { dod = { internet = { raw.4 = { raw.1 = { raw.311 = { raw.21 = { raw.10 = 0x3018300a06082b06010505070302300a06082b06010505070301 } } } } } } } }, iso = { identified-organization = { dod = { internet = { raw.4 = { raw.1 = { raw.311 = { raw.21 = { raw.7 = 0x302d06252b060104018237150887bdd71b81e7eb4682819d2e8ed00c87f0da1d5d8284e56982f3a73e020164020126 } } } } } } } }, iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { pe = { authorityInfoAccess = { accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.2", accessLocation = { uniformResourceIdentifier = "http://www.microsoft.com/pkiops/certs/Microsoft\%20Azure\%20ECC\%20TLS\%20Issuing\%20CA\%2007\%20-\%20xsign.crt" } }, accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.1", accessLocation = { uniformResourceIdentifier = "http://oneocsp.microsoft.com/ocsp" } } } } } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectKeyIdentifier = 0x66049738476c00117e167457b78b2eae04332c56 } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectAltName = { dNSName = "www.learn.microsoft.com", dNSName = "learn.microsoft.com" } } } }, joint-iso-itu-t = { ds = { certificateExtension = { cRLDIstributionPoints = { distributionPoint = { distributionPointName = { fullName = { uniformResourceIdentifier = "http://www.microsoft.com/pkiops/crl/Microsoft\%20Azure\%20ECC\%20TLS\%20Issuing\%20CA\%2007.crl" } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { certificatePolicies = { policyInformation = { policyIdentifier = "1.3.6.1.4.1.311.76.509.1.1", policyQualifiers = { policyQualifierInfo = { iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { raw.2 = { raw.1 = 0x1633687474703a2f2f7777772e6d6963726f736f66742e636f6d2f706b696f70732f446f63732f5265706f7369746f72792e68746d } } } } } } } } } } }, policyInformation = { policyIdentifier = "2.23.140.1.2.2" } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { authorityKeyIdentifier = { keyIdentifier = 0xc35eac4076c0064de32b9499306073349829c651 } } } }, joint-iso-itu-t = { ds = { certificateExtension = { extKeyUsage = { keyPurposeId = "1.3.6.1.5.5.7.3.2", keyPurposeId = "1.3.6.1.5.5.7.3.1" } } } } } }, signatureAlgorithm = { iso = { member-body = { us = { ansi-x962 = { signatures = { ecdsa-with-SHA2 = { ecdsa-with-SHA384 = no } } } } } } }, signature = 0x003065023046da82e0401eeda271cc45245c26fa8091a8cf4932a71c81f279247adedd19bc628d8abfe19acdd6f416b1e1562d239d0231009718e1459ef93bcb67c06e388670ab384993ade226b0d07336ba5346d08f3fca553e9cdff5f40ea367e1ccfea9a35089 }
match 30 82 06 17 30 82 05 9d a0 03 02 01 02 02 13 33 00 00 4a 3e 86 50 65 e6 81 d8 c8 7b 00 00 00 00 4a 3e 30 0a 06 08 2a 86 48 ce 3d 04 03 03 30 5d 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2e 30 2c 06 03 55 04 03 13 25 4d 69 63 72 6f 73 6f 66 74 20 41 7a 75 72 65 20 45 43 43 20 54 4c 53 20 49 73 73 75 69 6e 67 20 43 41 20 30 37 30 1e 17 0d 32 34 31 30 32 38 32 30 33 33 31 33 5a 17 0d 32 35 31 30 32 33 32 30 33 33 31 33 5a 30 6a 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 0b 30 09 06 03 55 04 08 0c 02 57 41 31 10 30 0e 06 03 55 04 07 0c 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 1c 30 1a 06 03 55 04 03 13 13 6c 65 61 72 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 30 59 30 13 06 07 2a 86 48 ce 3d 02 01 06 08 2a 86 48 ce 3d 03 01 07 03 42 00 04 bc 91 b5 25 05 f2 a2 1e fe 02 23 22 ca 02 53 34 1e e9 96 07 3d fd 10 f9 f7 d3 0e bd af e3 c3 fb a7 9f 3e f7 e8 cc be 9c f2 99 a5 15 d2 79 e3 a0 43 9c 03 c9 c1 90 eb 2a a6 3e f8 ac 45 7c 26 07 a3 82 04 2d 30 82 04 29 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 07 80 30 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 82 01 7d 06 0a 2b 06 01 04 01 d6 79 02 04 02 04 82 01 6d 04 82 01 69 01 67 00 76 00 12 f1 4e 34 bd 53 72 4c 84 06 19 c3 8f 3f 7a 13 f8 e7 b5 62 87 88 9c 6d 30 05 84 eb e5 86 26 3a 00 00 01 92 d4 de 62 25 00 00 04 03 00 47 30 45 02 21 00 f1 c1 0a 24 64 e5 ec b6 63 1b 35 ec 32 0a 41 02 2c 63 75 91 d1 12 cd f0 8b 1c 8a 75 2e 48 c2 41 02 20 4a 35 b1 ab 4f 35 b1 bb aa 71 a2 e1 44 d7 e8 d4 47 6f 87 a7 fa 5a 95 98 16 50 6c 34 53 72 9c e1 00 76 00 7d 59 1e 12 e1 78 2a 7b 1c 61 67 7c 5e fd f8 d0 87 5c 14 a0 4e 95 9e b9 03 2f d9 0e 8c 2e 79 b8 00 00 01 92 d4 de 60 f7 00 00 04 03 00 47 30 45 02 20 30 e3 c4 ca a6 39 19 84 0a ff 5e f8 e5 5e f4 72 1c 6e da 63 a0 ab 00 01 c7 12 06 7b 22 3a 0f ec 02 21 00 80 5f ad 84 78 fc e7 52 c5 d3 c4 ab 5f 24 f2 7d 5c 7b e7 94 70 54 e6 22 de 5b b0 e6 30 bd c4 ac 00 75 00 1a 04 ff 49 d0 54 1d 40 af f6 a0 c3 bf f1 d8 c4 67 2f 4e ec ee 23 40 68 98 6b 17 40 2e dc 89 7d 00 00 01 92 d4 de 61 05 00 00 04 03 00 46 30 44 02 20 7b d6 d9 a2 f2 8b 48 31 96 7b fe af 5e d3 12 3c 7b 1e 89 af 6a 33 12 2c ce 5a cf 65 fc 5d f5 00 02 20 36 7e 05 ab 77 f6 f8 f1 42 fa cd b6 b2 8d f6 97 7a b5 2c 3a 6b 00 8b c3 50 a3 5e ba 86 32 16 5b 30 27 06 09 2b 06 01 04 01 82 37 15 0a 04 1a 30 18 30 0a 06 08 2b 06 01 05 05 07 03 02 30 0a 06 08 2b 06 01 05 05 07 03 01 30 3c 06 09 2b 06 01 04 01 82 37 15 07 04 2f 30 2d 06 25 2b 06 01 04 01 82 37 15 08 87 bd d7 1b 81 e7 eb 46 82 81 9d 2e 8e d0 0c 87 f0 da 1d 5d 82 84 e5 69 82 f3 a7 3e 02 01 64 02 01 26 30 81 b4 06 08 2b 06 01 05 05 07 01 01 04 81 a7 30 81 a4 30 73 06 08 2b 06 01 05 05 07 30 02 86 67 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 6f 70 73 2f 63 65 72 74 73 2f 4d 69 63 72 6f 73 6f 66 74 25 32 30 41 7a 75 72 65 25 32 30 45 43 43 25 32 30 54 4c 53 25 32 30 49 73 73 75 69 6e 67 25 32 30 43 41 25 32 30 30 37 25 32 30 2d 25 32 30 78 73 69 67 6e 2e 63 72 74 30 2d 06 08 2b 06 01 05 05 07 30 01 86 21 68 74 74 70 3a 2f 2f 6f 6e 65 6f 63 73 70 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 6f 63 73 70 30 1d 06 03 55 1d 0e 04 16 04 14 66 04 97 38 47 6c 00 11 7e 16 74 57 b7 8b 2e ae 04 33 2c 56 30 37 06 03 55 1d 11 04 30 30 2e 82 17 77 77 77 2e 6c 65 61 72 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 82 13 6c 65 61 72 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 30 6a 06 03 55 1d 1f 04 63 30 61 30 5f a0 5d a0 5b 86 59 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 6f 70 73 2f 63 72 6c 2f 4d 69 63 72 6f 73 6f 66 74 25 32 30 41 7a 75 72 65 25 32 30 45 43 43 25 32 30 54 4c 53 25 32 30 49 73 73 75 69 6e 67 25 32 30 43 41 25 32 30 30 37 2e 63 72 6c 30 66 06 03 55 1d 20 04 5f 30 5d 30 51 06 0c 2b 06 01 04 01 82 37 4c 83 7d 01 01 30 41 30 3f 06 08 2b 06 01 05 05 07 02 01 16 33 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 6f 70 73 2f 44 6f 63 73 2f 52 65 70 6f 73 69 74 6f 72 79 2e 68 74 6d 30 08 06 06 67 81 0c 01 02 02 30 1f 06 03 55 1d 23 04 18 30 16 80 14 c3 5e ac 40 76 c0 06 4d e3 2b 94 99 30 60 73 34 98 29 c6 51 30 1d 06 03 55 1d 25 04 16 30 14 06 08 2b 06 01 05 05 07 03 02 06 08 2b 06 01 05 05 07 03 01 30 0a 06 08 2a 86 48 ce 3d 04 03 03 03 68 00 30 65 02 30 46 da 82 e0 40 1e ed a2 71 cc 45 24 5c 26 fa 80 91 a8 cf 49 32 a7 1c 81 f2 79 24 7a de dd 19 bc 62 8d 8a bf e1 9a cd d6 f4 16 b1 e1 56 2d 23 9d 02 31 00 97 18 e1 45 9e f9 3b cb 67 c0 6e 38 86 70 ab 38 49 93 ad e2 26 b0 d0 73 36 ba 53 46 d0 8f 3f ca 55 3e 9c df f5 f4 0e a3 67 e1 cc fe a9 a3 50 89
encode-pair Certificate = { tbsCertificate = { version = { number = 2 }, serialNumber = 0x04636f8c80f7fcf6c253c3b1e51a9f83902163b6, signature = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-1 = { sha256WithRSAEncryption = no } } } } } } }, issuer = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "California" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "San Francisco" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Example Corp" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { iso = { member-body = { us = { rsadsi = { pkcs = { raw.9 = { raw.1 = 0x16136578616d706c65406578616d706c652e636f6d } } } } } } } } }, validity = { notBefore = "2025-01-17T15:10:41Z", notAfter = "2025-02-16T15:10:41Z" }, subject = { RelativeDistinguishedName = { AttributeTypeandValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeandValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "California" } } } } }, RelativeDistinguishedName = { AttributeTypeandValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "San Francisco" } } } } }, RelativeDistinguishedName = { AttributeTypeandValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Example Corp" } } } } }, RelativeDistinguishedName = { AttributeTypeandValue = { iso = { member-body = { us = { rsadsi = { pkcs = { raw.9 = { raw.1 = 0x16136578616d706c65406578616d706c652e636f6d } } } } } } } } }, subjectPublicKeyInfo = { algorithm = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-1 = { rsaEncryption = no } } } } } } }, subjectPublicKey = 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 }, extensions = { Critical = { joint-iso-itu-t = { ds = { certificateExtension = { keyUsage = { digitalSignature = yes, nonRepudation = no, keyEncipherment = yes, dataEncipherment = no, keyAgreement = yes, keyCertSign = no, cRLSign = no, encipherOnly = no } } } }, joint-iso-itu-t = { ds = { certificateExtension = { basicConstraints = { cA = yes } } } }, joint-iso-itu-t = { ds = { certificateExtension = { raw.28 = 0x3027a01ea01c861a687474703a2f2f6d79686f73742e636f6d2f6d7963612e63726c830205608401ff } } } }, joint-iso-itu-t = { ds = { certificateExtension = { extKeyUsage = { keyPurposeId = "1.3.6.1.5.5.7.3.1", keyPurposeId = "1.3.6.1.5.5.7.3.2" } } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectAltName = { dNSName = "example.com", dNSName = "www.example.com" } } } }, joint-iso-itu-t = { ds = { certificateExtension = { cRLDIstributionPoints = { distributionPoint = { distributionPointName = { fullName = { uniformResourceIdentifier = "http://example.com/crl" } } } } } } }, iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { pe = { authorityInfoAccess = { accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.1", accessLocation = { uniformResourceIdentifier = "http://example.com/ocsp" } } } } } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectKeyIdentifier = 0xd1ae81f4074fed5abe29c71a179154cdd39e1a1a } } }, joint-iso-itu-t = { ds = { certificateExtension = { authorityKeyIdentifier = { authorityCertIssuer = { directoryName = { RDNSequence = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "California" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "San Francisco" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Example Corp" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { iso = { member-body = { us = { rsadsi = { pkcs = { raw.9 = { raw.1 = 0x16136578616d706c65406578616d706c652e636f6d } } } } } } } } } } }, authorityCertSerialNumber = 0x04636f8c80f7fcf6c253c3b1e51a9f83902163b6 } } } }, joint-iso-itu-t = { ds = { certificateExtension = { certificatePolicies = { policyInformation = { policyIdentifier = "1.2.3.4.5", policyQualifiers = { policyQualifierInfo = { iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { raw.2 = { raw.1 = 0x1616687474703a2f2f6578616d706c652e636f6d2f637073 } } } } } } } } }, policyQualifierInfo = { iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { raw.2 = { raw.2 = 0x303730211a114f7267616e69736174696f6e204e616d65300c0201010201020201030201041a124578706c6963697420546578742048657265 } } } } } } } } } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { raw.18 = 0x301e820b6578616d706c652e636f6d820f7777772e6578616d706c652e636f6d } } }, joint-iso-itu-t = { ds = { certificateExtension = { policyConstraints = { requireExplicitPolicy = 0x01 } } } }, joint-iso-itu-t = { ds = { certificateExtension = { inhibitAnyPolicy = 2 } } }, iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { pe = { subjectInfoAccess = { accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.2", accessLocation = { uniformResourceIdentifier = "example.com" } } } } } } } } } } } } }, signatureAlgorithm = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-1 = { sha256WithRSAEncryption = no } } } } } } }, signature = 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 }
projects / thirdparty / freeradius-server.git / commitdiff
