PKCS7 certificate
m |
|||
| Line 4: | Line 4: | ||
|extensions={{ext|p7b}}, {{ext|p7c}}, {{ext|spc}}, {{ext|pem}} | |extensions={{ext|p7b}}, {{ext|p7c}}, {{ext|spc}}, {{ext|pem}} | ||
}} | }} | ||
| − | '''PKCS7 certificate''' (or '''PKCS #7 certificate''') is a | + | '''PKCS7 certificate''' (or '''PKCS #7 certificate''') is a degenerate form of the [[PKCS7|PKCS #7]] cryptographic message standard defined in RFC 2315. It stores only [[X.509 certificate|X.509 certificates]] (or possibly a certificate revocation list), with no encrypted data. |
== Format == | == Format == | ||
| Line 31: | Line 31: | ||
* RFC 2315: PKCS #7: Cryptographic Message Syntax | * RFC 2315: PKCS #7: Cryptographic Message Syntax | ||
* [[Wikipedia:PKCS|Wikipedia: PKCS]] | * [[Wikipedia:PKCS|Wikipedia: PKCS]] | ||
| − | |||
| − | |||
| − | |||
Revision as of 14:49, 27 October 2013
PKCS7 certificate (or PKCS #7 certificate) is a degenerate form of the PKCS #7 cryptographic message standard defined in RFC 2315. It stores only X.509 certificates (or possibly a certificate revocation list), with no encrypted data.
Contents |
Format
A PKCS7 certificate is serialized using either PEM or DER format.
The format is distinct from PEM encoded certificate and DER encoded certificate formats, even though those names are accurate descriptions of it.
.spc files sometimes use a different format, in which the DER data is base64-encoded (raw base64, not PEM), and then the base64 text is written to the file encoded in either ASCII or UTF-16.
Identification
PEM-formatted files have a line that reads "-----BEGIN PKCS7-----" or "-----BEGIN PKCS #7 SIGNED DATA-----".
Reportedly, the line "-----BEGIN CERTIFICATE-----" has sometimes been used instead, but this collides with PEM encoded certificate format, and should be considered incorrect.
Examples
To view the contents of a PEM-formatted PKCS7 certificate, using OpenSSL:
openssl pkcs7 -noout -text -print_certs -in example.p7b
To view the contents of a DER-formatted PKCS7 certificate:
openssl pkcs7 -inform der -noout -text -print_certs -in example.p7b
Software
Links
- RFC 2315: PKCS #7: Cryptographic Message Syntax
- Wikipedia: PKCS
