[实例] x509 命令（将证书转为 CSR 文件）

[root@monitor ssl.crt]# openssl x509 -in mail.bob.com.crt -x509toreq
Getting request Private Key
no request key file specified

 

[root@monitor ssl.crt]# openssl x509 -in mail.bob.com.crt -x509toreq -signkey /etc/httpd/conf/ssl.key/server.key
Getting request Private Key
Generating certificate request
Certificate Request:
    Data:
        Version: 0 (0x0)
        Subject: C=CN, ST=GD, L=GZ, O=NAP, OU=Maintenance,
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:b5:3e:1c:89:b1:87:ad:26:ac:92:62:94:0d:5d:
                    4c:48:d9:99:b5:be:ce:ff:a8:be:2f:4c:b5:66:ca:
                    51:c4:96:4d:55:15:de:65:84:16:68:38:af:27:56:
                    6a:12:5a:95:a3:f7:69:39:a8:9e:7d:67:47:ff:13:
                    da:59:32:1a:ce:06:5b:89:c3:02:1b:7e:90:49:44:
                    4e:23:13:1f:ad:87:8e:51:73:c3:0e:bf:ee:06:81:
                    dd:46:95:4d:36:3a:1f:66:cb:e3:ff:71:23:56:9c:
                    f6:e5:a8:fe:c8:01:27:d2:53:56:35:4f:a5:19:22:
                    cb:da:04:49:29:0d:92:b6:4d
                Exponent: 65537 (0x10001)
        Attributes:
            a0:00
    Signature Algorithm: md5WithRSAEncryption
        49:bf:d8:ee:4a:6f:4a:a0:f2:f4:08:39:fb:9f:5d:52:26:92:
        38:f9:43:f7:30:08:f9:90:d6:7a:10:b2:fd:eb:fb:4c:db:f0:
        a2:25:ff:5f:4c:2a:e6:56:ba:b3:8b:93:91:0d:eb:6f:35:d3:
        06:68:ee:c8:40:41:30:0b:cb:f3:c9:a6:51:3c:21:39:cd:72:
        18:90:f4:27:02:6d:d2:26:17:3d:3d:dd:39:ca:8b:f2:9e:6a:
        2e:48:df:cb:b7:ec:b3:56:83:04:78:9c:34:c9:a2:4f:c5:2b:
        2d:f3:61:ad:4c:75:d7:87:5a:21:8a:45:a4:d8:e4:93:8b:25:
        0b:66
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
[root@monitor ssl.crt]#

 

[root@monitor ssl.crt]# cat ../ssl.csr/myrequest.csr
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
[root@monitor ssl.crt]#

 

可以看到是有部分相似的。

 

所以证书的内容包括了 CSR 的部分内容