phpseclib: X.509 Examples

(return to phpseclib: X.509 Feature List)

Action:

Method:

<?php
require __DIR__ . '/vendor/autoload.php';

use phpseclib\File\X509;

$x509 = new X509();
$cert = $x509->loadX509('...'); // see google.crt

print_r($cert);
print_r($x509->getDNProp('CN'));
print_r($x509->getDN());
print_r($x509->getIssuerDNProp('CN'));
echo $x509->getPublicKey();
echo $x509->getDN(true);
echo $x509->getIssuerDN(true);
print_r($x509->getIssuerDN());
use phpseclib\File\X509;

$x509 = new X509();
$x509->loadCA('...'); // see signer.crt
$cert = $x509->loadX509('...'); // see google.crt// see selfsigned.crt
echo $x509->validateSignature() ? 'valid' : 'invalid';
echo $x509->validateSignature(false) ?
    'valid' :
    'invalid';
// try it with "http://www.bing.com/search?q=phpseclib" too
echo $x509->validateURL('https://www.google.com/#q=phpseclib') ?
    'valid' :
    'invalid';
echo $x509->validateDate() ? 'valid' : 'invalid';
echo $x509->validateDate(strtotime('January 1, 2001')) ?
    'valid' :
    'invalid';
use phpseclib\File\X509;
use phpseclib\Crypt\RSA;

$privKey = new RSA();
extract($privKey->createKey());
$privKey->loadKey($privatekey);

$x509 = new X509();
$x509->setPrivateKey($privKey);
$x509->setDNProp('id-at-organizationName', 'phpseclib demo cert');

$csr = $x509->signCSR();

echo $x509->saveCSR($csr);
use phpseclib\File\X509;

$x509 = new X509();
$csr = $x509->loadCSR('...'); // see csr.csr

print_r($csr);
//echo $x509->validateSignature() ? 'valid' : 'invalid';
print_r($x509->getDNProp('O'));
print_r($x509->getDN());
echo $x509->getDN(true);
echo $x509->getPublicKey();
use phpseclib\File\X509;

$x509 = new X509();
$spkac = $x509->loadSPKAC('...'); // see spkac.spkac

print_r($spkac);
//echo $x509->validateSignature() ? 'valid' : 'invalid';
?>

permanent link

Output:

(see phpseclib: X.509: Decoder to try phpseclib's X.509 decoder with your own certificates)

$cert:

tbsCertificate
- version
  - v3
- serialNumber
  - 105827261859531100510423749949966875981
- signature
  - algorithm
    - sha1WithRSAEncryption
  - parameters
    - null
- issuer
  - rdnSequence
    - 0
      - 0
        type
        id-at-countryName
        value
        printableString
        ZA
    - 1
      - 0
        type
        id-at-organizationName
        value
        printableString
        Thawte Consulting (Pty) Ltd.
    - 2
      - 0
        type
        id-at-commonName
        value
        printableString
        Thawte SGC CA
- validity
  - notBefore
    - utcTime
      - Wed, 26 Oct 11 00:00:00 +0000
  - notAfter
    - utcTime
      - Mon, 30 Sep 13 23:59:59 +0000
- subject
  - rdnSequence
    - 0
      - 0
        type
        id-at-countryName
        value
        printableString
        US
    - 1
      - 0
        type
        id-at-stateOrProvinceName
        value
        printableString
        California
    - 2
      - 0
        type
        id-at-localityName
        value
        teletexString
        Mountain View
    - 3
      - 0
        type
        id-at-organizationName
        value
        teletexString
        Google Inc
    - 4
      - 0
        type
        id-at-commonName
        value
        teletexString
        www.google.com
- subjectPublicKeyInfo
  - algorithm
    - algorithm
      - rsaEncryption
    - parameters
      - null
  - subjectPublicKey
    - ```
    -----BEGIN PUBLIC KEY-----
    MIGJAoGBAN63JkOmmYXNOKcVCbnPD8nDVYyI7oyNKCckSypeoNgW+mEYS89tYIDTNUAycsCPEtjl
    To+5svbZFV5ahjGjuoaqa8jZcYzMzScTHp1CXTj2p6zv+mLzGIHUJEZ/AXd8xiqJFJm7mDkdqBn7
    OQBEfRuUangtaa3Aeiz60NogEpjTAgMBAAE=
    -----END PUBLIC KEY-----
```
- extensions
  - 0
    - extnId
      - id-ce-basicConstraints
    - critical
      - 1
    - extnValue
  - 1
    - extnId
      - id-ce-cRLDistributionPoints
    - critical
    - extnValue
      - 0
        distributionPoint
        fullName
        0
        uniformResourceIdentifier
        http://crl.thawte.com/ThawteSGCCA.crl
  - 2
    - extnId
      - id-ce-extKeyUsage
    - critical
    - extnValue
      - 0
        id-kp-serverAuth
      - 1
        id-kp-clientAuth
      - 2
        2.16.840.1.113730.4.1
  - 3
    - extnId
      - id-pe-authorityInfoAccess
    - critical
    - extnValue
      - 0
        accessMethod
        id-ad-ocsp
        accessLocation
        uniformResourceIdentifier
        http://ocsp.thawte.com
      - 1
        accessMethod
        id-ad-caIssuers
        accessLocation
        uniformResourceIdentifier
        http://www.thawte.com/repository/Thawte_SGC_CA.crt
signatureAlgorithm
- algorithm
  - sha1WithRSAEncryption
- parameters
  - null
signature
- ACGs1a7KNIlawqtS0rI0Zp16q+7mfNV+wlwou3QAyRAfQhP8aYoeJKACAOm6W8oZBLLTrwGyfl8U26bbUrma8xJ/fKKcO2+ZfepQDXYjEv/3ZnMpt5UKrdiLst4g6QpwZBEIyFrxfZ7saaWl1YLXJx6eVs3SdtV5K/clQxxp8Lj5

$prop:

0
- www.google.com

$dn:

rdnSequence
- 0
  - 0
    - type
      - id-at-countryName
    - value
      - printableString
        US
- 1
  - 0
    - type
      - id-at-stateOrProvinceName
    - value
      - printableString
        California
- 2
  - 0
    - type
      - id-at-localityName
    - value
      - teletexString
        Mountain View
- 3
  - 0
    - type
      - id-at-organizationName
    - value
      - teletexString
        Google Inc
- 4
  - 0
    - type
      - id-at-commonName
    - value
      - teletexString
        www.google.com

$prop:

0
- ```
Thawte SGC CA
```

$dn:

rdnSequence
- 0
  - 0
    - type
      - id-at-countryName
    - value
      - printableString
        ZA
- 1
  - 0
    - type
      - id-at-organizationName
    - value
      - printableString
        Thawte Consulting (Pty) Ltd.
- 2
  - 0
    - type
      - id-at-commonName
    - value
      - printableString
        Thawte SGC CA

Output:

phpseclib: X.509 Examples

Output:

Notes:

Output:

Output:

Output: