What files does a CA digital certificate contain? How to view SSL certificate information?

adopt CA The digital certificate issued by the organization contains public key and private key , It is used to encrypt and decrypt information and data in Internet communication 、 Digital signature and authentication . We can generally understand that this kind of digital certificate is the ID card of an individual or enterprise on the network .

To get a digital certificate , First of all, we need to talk to CA Agency application , After credible CA Verification audit can obtain . Successfully applied on Ruicheng platform SSL digital certificate , You can download the application directly CA certificate . If you apply for a website domain name SSL certificate , You can download certificate packages in different server formats , Here's the picture ： Support Nginx Server installed SSL The certificate contains a certificate with .key Suffix private key file and with .crt Suffix public key file .

After obtaining the certificate package, you need to deploy it to the server . After installing on the server , The website will bring a security lock , Click on it and you'll see it CA Digital certificate is like our common ID card , It also includes the issuing authority , Term of validity , User details .

for example ： Open a with a safety lock racent.com Website , Click on 【 The certificate is valid 】- Details , You can see the deployment of the website SSL The content of the certificate .

• Version number (Version Number）： Version number of the specification , The current version is 3, The value is 0x2;
• Serial number （Serial Number）： from CA Maintain a serial number assigned to each certificate it issues , Used to track and revoke certificates . As long as you have the issuer information and serial number , You can uniquely identify a certificate ;
• Signature algorithm （Signature Algorithm）： The digital certificate supports the algorithm used for digital signature , Such as ：sha256RSA.
• Issued by the （Issuer）： Namely CA Issuing authority , Is the identification information of the certificate issuing unit , Pictured above CN = sslTrus (RSA) EV CA,O = sslTrus ( Shanghai Ruicheng Information Technology Co., Ltd ),C = CN.
• The period of validity (Validity): The validity of the certificate is very long , Including start and end time .
• Users (Subject): The identity of the certificate owner . If you are using OV or EV Type certificate , You can view the enterprise information , Identify the authenticity of the company .
• The public key information of the subject (Subject Public Key Info）： Information about the protected public key .
• User optional name （Subject Alternative Name）： That is, all domain names protected by the certificate .

The above details can be viewed in the certificate details , To learn more about digital certificates , see also https://www.racent.com/help/list/4