Timeline for Files related/required to a digital certificate
Current License: CC BY-SA 3.0
12 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Mar 29, 2016 at 16:47 | vote | accept | Noob | ||
Mar 29, 2016 at 16:43 | comment | added | Sergio A. Figueroa | Yes. As I said: don't worry about the encoding, because it's transparent. | |
Mar 29, 2016 at 16:41 | comment | added | Noob | not sure i would really understand that.. given my level, can i just say that the parsing of cert from 1 encoding to another includes the digital signature of the ca as well ? | |
Mar 29, 2016 at 16:34 | comment | added | Sergio A. Figueroa | The hash is calculated over the rawest form. For instance, if you have $x$, $base64-enc(x)$ or $hex-enc(x)$, you can calculate the $hash(x)$ from any of them (decoding first, in the second and third case). The validity remains because the data is the same, although encoded differently. | |
Mar 29, 2016 at 16:27 | comment | added | Noob | pardon me for asking over here. - when parsing 1 cert from 1 encoding to another, is the digital signature of the ca consider as part of the cert ? my basic understanding is signing a cert means signing a hash of the cert with the ca private key. if the encoding is different after parsing, the hash is gonna be different as well, isn't it - wouldn't we need to get the ca to resign the cert? | |
Mar 29, 2016 at 16:18 | comment | added | Sergio A. Figueroa | Exactly. You can take an already signed certificate and parse it from PEM to DER or import it into a keystore without affecting its validity. | |
Mar 29, 2016 at 16:08 | comment | added | Noob | thanks! so this "encoding' of the format der,pem is nothing to do with the "digital signing/encryption" of the cert itself by the CA - yea ? just wanna be sure. | |
Mar 29, 2016 at 16:05 | comment | added | Sergio A. Figueroa | Exactly. Most robust tools can handle all the alternative encodings transparently. | |
Mar 29, 2016 at 15:58 | comment | added | Noob | @sergios, thanks for the link, will try to digest it. just want to be sure, when we talk about encoding of the cert, we are just talking about the format/internal presentation of the cert, and that is before the cert get sign by a CA ? | |
Mar 29, 2016 at 15:48 | comment | added | Sergio A. Figueroa | @Noob They are just encodings and shouldn't bother you in high level terms. However, you can take a look to my answer here about them: crypto.stackexchange.com/questions/33636/… | |
Mar 29, 2016 at 15:38 | comment | added | Noob | thanks for the wonderful add-on, i have slightly amended my original question. please kindly take a look | |
Mar 29, 2016 at 14:41 | history | answered | Sergio A. Figueroa | CC BY-SA 3.0 |