[实例] verify 命令（验证一个真正的证书）

[root@monitor bob]# openssl verify -CAfile /usr/share/ssl/certs/ca-bundle.crt -purpose any -verbose amd.cer
amd.cer: OK
[root@monitor bob]#

 

[root@monitor bob]# openssl x509 -text -noout -in amd.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120002076 (0x727161c)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root
        Validity
            Not Before: Oct 24 14:25:24 2007 GMT
            Not After : Oct 24 14:24:25 2008 GMT
        Subject: C=US, O=Akamai Technologies, Inc., CN=a248.e.akamai.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:a7:f7:97:76:b4:58:82:a3:28:e4:ff:8b:81:7a:
                    5c:c9:ac:5c:c1:63:3d:23:04:a5:85:b7:9d:5e:fd:
                    a4:e4:15:fe:34:f5:4b:02:16:7f:8f:bb:97:56:f0:
                    c8:e4:7f:26:a2:7a:16:bd:ea:03:04:bd:6d:98:88:
                    da:dd:ae:8f:31:d3:95:5e:97:30:0a:4e:18:45:47:
                    60:f4:0f:24:6f:60:bb:7e:25:4e:63:73:7c:c0:ce:
                    f4:75:8b:50:7a:3a:aa:bb:dd:3e:d1:7f:10:b7:58:
                    99:67:39:99:7b:b2:57:27:44:a2:b6:09:46:c4:4c:
                    6b:dc:52:0a:4c:e2:57:30:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints:
            CA:FALSE
            X509v3 Certificate Policies:
            Policy: 1.3.6.1.4.1.6334.1.0
              CPS:

 

            X509v3 Key Usage:
            Key Encipherment
            X509v3 Authority Key Identifier:
            DirName:/C=US/O=GTE Corporation/OU=GTE CyberTrust Solutions, Inc./CN=GTE CyberTrust Global Root
            serial:01:A5

 

            X509v3 CRL Distribution Points:
            URI:

 

    Signature Algorithm: sha1WithRSAEncryption
        22:2b:b6:c6:a4:52:01:ae:4c:c0:e5:3f:e0:cd:41:9e:2e:6e:
        57:ba:6e:fd:d3:0a:46:76:af:c4:0b:9c:05:31:95:b9:07:e9:
        e8:e6:06:98:20:ae:16:b1:9c:32:e8:8e:4f:3a:23:21:42:1f:
        87:11:b9:fe:3c:ef:1d:6d:b1:45:56:fe:41:67:3e:70:a9:78:
        27:1b:90:b4:75:d5:85:a3:88:d2:09:01:51:90:b5:1e:34:46:
        d1:ca:ab:c8:ce:6e:46:15:58:d9:e7:ed:7b:c8:9c:e7:89:46:
        1a:64:ba:23:3b:39:dd:82:a6:3c:28:60:72:62:f8:67:43:ae:
        5c:3d
[root@monitor bob]#