On Tue, Jan 08, 2008, sunilv wrote:

> 
> Where can I get the information whic is the DN component and whcich is the
> extension.
> Am new to this certificate related work.Thats the reason I might be asking
> some trivial questions.
> 

The relevant standards will normally include this information.

In the case of serialNumber there is an optional DN component X520SerialNumber
which is referred to as "serialNumber" by OpenSSL. This is an attribute
associated with the subject of the certificate.

There is also a mandatory certificate field called serialNumber which is a
unique serialNumber included by a CA.

I suggest you view the certificate with 'openssl x509 -in cert.pem -text' and
see which one you wish to extract.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to