{"id":10533,"date":"2021-03-11T15:56:22","date_gmt":"2021-03-11T15:56:22","guid":{"rendered":"http:\/\/www.max-sperling.bplaced.net\/?p=10533"},"modified":"2024-02-16T10:36:24","modified_gmt":"2024-02-16T10:36:24","slug":"nss-shared-db","status":"publish","type":"post","link":"http:\/\/www.max-sperling.bplaced.net\/?p=10533","title":{"rendered":"View certificates from NSSDB"},"content":{"rendered":"

List containing files<\/p>\n

\r\n$ ls\r\ncert9.db  key4.db  pkcs11.txt\r\n<\/pre>\n\n\n\n\n
cert9.db<\/td>\nSQLite database<\/td>\nCertificate store<\/td>\n<\/tr>\n
key4.db<\/td>\nSQLite database<\/td>\nPassword store<\/td>\n<\/tr>\n
pkcs11.txt<\/td>\nText file<\/td>\nInit parameter<\/td>\n<\/tr>\n<\/table>\n
Show containing certificates<\/p>\n
\r\n$ certutil -L -d sql:.\r\n\r\nCertificate Nickname                                         Trust Attributes\r\n                                                             SSL,S\/MIME,JAR\/XPI\r\n\r\nDigiCert TLS RSA SHA256 2020 CA1                             ,,\r\nDigiCert SHA2 Secure Server CA                               ,,\r\nAmazon                                                       ,,\r\nR3                                                           ,,\r\nGTS CA 1O1                                                   ,,\r\n<\/pre>\n
Show certificate details (here: Amazon)<\/p>\n
\r\n$ certutil -L -d sql:. -a -n \"Amazon\" | openssl x509 -text -noout\r\nCertificate:\r\n    Data:\r\n        Version: 3 (0x2)\r\n        Serial Number:\r\n            06:7f:94:57:85:87:e8:ac:77:de:b2:53:32:5b:bc:99:8b:56:0d\r\n    Signature Algorithm: sha256WithRSAEncryption\r\n        Issuer: C=US, O=Amazon, CN=Amazon Root CA 1\r\n        Validity\r\n            Not Before: Oct 22 00:00:00 2015 GMT\r\n            Not After : Oct 19 00:00:00 2025 GMT\r\n        Subject: C=US, O=Amazon, OU=Server CA 1B, CN=Amazon\r\n        Subject Public Key Info:\r\n            Public Key Algorithm: rsaEncryption\r\n                Public-Key: (2048 bit)\r\n                Modulus:\r\n                    00:c2:4e:16:67:dd:ce:bc:6a:c8:37:5a:ec:3a:30:\r\n                    b0:1d:e6:d1:12:e8:12:28:48:cc:e8:29:c1:b9:6e:\r\n                    53:d5:a3:eb:03:39:1a:cc:77:87:f6:01:b9:d9:70:\r\n                    cc:cf:6b:8d:e3:e3:03:71:86:99:6d:cb:a6:94:2a:\r\n                    4e:13:d6:a7:bd:04:ec:0a:16:3c:0a:eb:39:b1:c4:\r\n                    b5:58:a3:b6:c7:56:25:ec:3e:52:7a:a8:e3:29:16:\r\n                    07:b9:6e:50:cf:fb:5f:31:f8:1d:ba:03:4a:62:89:\r\n                    03:ae:3e:47:f2:0f:27:91:e3:14:20:85:f8:fa:e9:\r\n                    8a:35:f5:5f:9e:99:4d:e7:6b:37:ef:a4:50:3e:44:\r\n                    ec:fa:5a:85:66:07:9c:7e:17:6a:55:f3:17:8a:35:\r\n                    1e:ee:e9:ac:c3:75:4e:58:55:7d:53:6b:0a:6b:9b:\r\n                    14:42:d7:e5:ac:01:89:b3:ea:a3:fe:cf:c0:2b:0c:\r\n                    84:c2:d8:53:15:cb:67:f0:d0:88:ca:3a:d1:17:73:\r\n                    f5:5f:9a:d4:c5:72:1e:7e:01:f1:98:30:63:2a:aa:\r\n                    f2:7a:2d:c5:e2:02:1a:86:e5:32:3e:0e:bd:11:b4:\r\n                    cf:3c:93:ef:17:50:10:9e:43:c2:06:2a:e0:0d:68:\r\n                    be:d3:88:8b:4a:65:8c:4a:d4:c3:2e:4c:9b:55:f4:\r\n                    86:e5\r\n                Exponent: 65537 (0x10001)\r\n        X509v3 extensions:\r\n            X509v3 Basic Constraints: critical\r\n                CA:TRUE, pathlen:0\r\n            X509v3 Key Usage: critical\r\n                Digital Signature, Certificate Sign, CRL Sign\r\n            X509v3 Subject Key Identifier: \r\n                59:A4:66:06:52:A0:7B:95:92:3C:A3:94:07:27:96:74:5B:F9:3D:D0\r\n            X509v3 Authority Key Identifier: \r\n                keyid:84:18:CC:85:34:EC:BC:0C:94:94:2E:08:59:9C:C7:B2:10:4E:0A:08\r\n\r\n            Authority Information Access: \r\n                OCSP - URI:http:\/\/ocsp.rootca1.amazontrust.com\r\n                CA Issuers - URI:http:\/\/crt.rootca1.amazontrust.com\/rootca1.cer\r\n\r\n            X509v3 CRL Distribution Points: \r\n\r\n                Full Name:\r\n                  URI:http:\/\/crl.rootca1.amazontrust.com\/rootca1.crl\r\n\r\n            X509v3 Certificate Policies: \r\n                Policy: 2.23.140.1.2.1\r\n\r\n    Signature Algorithm: sha256WithRSAEncryption\r\n         85:92:be:35:bb:79:cf:a3:81:42:1c:e4:e3:63:73:53:39:52:\r\n         35:e7:d1:ad:fd:ae:99:8a:ac:89:12:2f:bb:e7:6f:9a:d5:4e:\r\n         72:ea:20:30:61:f9:97:b2:cd:a5:27:02:45:a8:ca:76:3e:98:\r\n         4a:83:9e:b6:e6:45:e0:f2:43:f6:08:de:6d:e8:6e:db:31:07:\r\n         13:f0:2f:31:0d:93:6d:61:37:7b:58:f0:fc:51:98:91:28:02:\r\n         4f:05:76:b7:d3:f0:1b:c2:e6:5e:d0:66:85:11:0f:2e:81:c6:\r\n         10:81:29:fe:20:60:48:f3:f2:f0:84:13:53:65:35:15:11:6b:\r\n         82:51:40:55:57:5f:18:b5:b0:22:3e:ad:f2:5e:a3:01:e3:c3:\r\n         b3:f9:cb:41:5a:e6:52:91:bb:e4:36:87:4f:2d:a9:a4:07:68:\r\n         35:ba:94:72:cd:0e:ea:0e:7d:57:f2:79:fc:37:c5:7b:60:9e:\r\n         b2:eb:c0:2d:90:77:0d:49:10:27:a5:38:ad:c4:12:a3:b4:a3:\r\n         c8:48:b3:15:0b:1e:e2:e2:19:dc:c4:76:52:c8:bc:8a:41:78:\r\n         70:d9:6d:97:b3:4a:8b:78:2d:5e:b4:0f:a3:4c:60:ca:e1:47:\r\n         cb:78:2d:12:17:b1:52:8b:ca:39:2c:bd:b5:2f:c2:33:02:96:\r\n         ab:da:94:7f\r\n<\/pre>\n","protected":false},"excerpt":{"rendered":"
List containing files $ ls cert9.db key4.db pkcs11.txt cert9.db SQLite database Certificate store key4.db SQLite database Password store pkcs11.txt Text<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false},"categories":[26],"tags":[],"_links":{"self":[{"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=\/wp\/v2\/posts\/10533"}],"collection":[{"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=10533"}],"version-history":[{"count":1,"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=\/wp\/v2\/posts\/10533\/revisions"}],"predecessor-version":[{"id":16801,"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=\/wp\/v2\/posts\/10533\/revisions\/16801"}],"wp:attachment":[{"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=10533"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=10533"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.max-sperling.bplaced.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=10533"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}