Checking What is in a Certificate Signing Request (CSR) Using OpenSSL
in cases where you need to send request to a Certifcate Authority (CA) to get a Certificate signed,
you will need to provide a Certifcate Signing Request (CSR).
And in some case you want to see the details of the CSR to more human friendly format to trobulshoot an problem.
We van use OPenSSL command to view the information about the CSR.
openssl req -noout -text -in sample.csr
For example
Lets take a sample.csr
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
we can get information for the csr file via below commnad
$ : openssl req -noout -text -in tenderprog.csr
Certificate Request:
Data:
Version: 1 (0x0)
Subject: C=IN, ST=Karnataka, L=Bengaluru, O=tenderprod.com, OU=tender-security, CN=tenderprog.com, emailAddress=rakesh@tenderprog.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (4096 bit)
Modulus:
00:e7:8b:08:45:54:05:7b:2c:e8:04:d7:7b:29:4d:
ce:d9:0e:1a:c8:c7:53:74:df:e7:44:ce:35:5d:1f:
11:b0:25:a1:b6:c2:d7:71:98:d6:18:98:b7:5f:0b:
3d:a0:81:f7:36:4b:2a:2e:fa:be:3e:d6:72:85:75:
53:28:ff:9d:32:05:f3:98:47:f7:9d:52:47:32:e0:
46:d5:dc:40:9f:b8:55:58:74:b0:98:a4:3d:fc:ab:
31:8e:30:84:53:af:7a:3b:a4:b4:38:4a:69:70:8d:
1b:46:cd:62:e9:71:dd:7b:46:27:c9:46:b9:56:b6:
de:f9:ce:48:02:46:6f:6d:59:61:e2:95:4a:74:15:
eb:98:20:fd:78:7e:1d:14:89:cb:57:35:61:80:33:
bc:e6:2a:64:c1:e4:da:e0:9a:41:01:4c:10:2f:bc:
29:ed:d7:d2:d6:c0:a0:57:8d:ae:93:f5:a4:b0:9b:
22:fa:8b:53:93:1c:c3:f1:b5:00:87:8c:23:63:ab:
da:f0:95:9e:86:d8:99:4a:6c:09:ba:5f:42:62:7d:
0b:a5:12:99:0e:45:2e:68:78:b8:03:24:f5:56:a4:
8b:74:d1:2d:7a:a3:7e:19:d7:6e:5d:87:51:d7:fd:
05:ef:12:6b:91:80:94:bc:7a:75:98:a8:bd:b3:d8:
33:d7:6e:15:f2:f4:01:7e:41:b3:82:88:9a:23:6c:
c7:13:30:e8:03:9e:5b:7a:88:1f:b3:6c:21:89:98:
6e:1a:7b:92:f3:61:7c:51:32:f1:bd:f4:a3:5a:1e:
c5:5d:73:83:6a:cf:0b:ce:05:e3:f7:e9:69:36:cf:
55:69:81:ee:1e:47:b3:b9:60:9b:59:3b:4f:4c:43:
87:9a:d8:a9:ac:6e:26:c3:89:9f:92:e7:14:ab:7a:
23:fb:d2:7e:f4:47:f2:d3:62:07:6e:f7:8b:20:08:
b7:d6:1e:5b:f7:ea:94:63:24:cd:76:9c:05:8f:fe:
6d:4e:77:7d:8c:82:00:fb:49:d6:18:c5:2b:3d:0b:
14:3b:df:66:36:50:81:88:9a:ff:d3:8e:0b:0d:2e:
1a:a8:d3:fb:46:cb:50:68:50:cd:8c:1b:57:01:bc:
3f:ad:71:22:a3:cf:37:30:eb:7a:99:7b:f4:e3:cb:
ba:f0:99:b5:9e:ee:f8:41:47:3e:b9:68:f5:15:e0:
24:51:1c:d0:cb:34:f7:4c:75:b0:03:40:42:16:81:
1f:ba:7b:6a:fe:b8:89:9c:8e:cc:c3:9c:a3:d6:16:
f9:e2:ab:7f:62:fe:4e:66:31:6e:c6:62:73:4e:7c:
e0:b7:77:a8:b4:58:8e:e4:a9:aa:1f:06:ae:f1:6a:
cd:1e:f7
Exponent: 65537 (0x10001)
Attributes:
unstructuredName :tenderprog
Requested Extensions:
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
c7:63:18:b5:45:b0:a4:88:ef:b5:09:96:b6:2e:e4:f1:58:fe:
25:9a:18:91:7a:61:c7:e9:98:89:cf:02:92:91:ed:1f:e8:f7:
2f:75:fd:f2:12:12:e4:64:ba:96:09:2c:35:d6:c7:7f:be:98:
8b:7e:53:be:f1:2f:a7:51:1a:0e:40:01:6f:7f:d3:32:c3:f8:
0f:74:24:89:fa:72:10:f7:9c:93:93:b4:f8:6f:74:29:44:6e:
99:db:a0:93:4e:af:2e:27:57:70:49:60:93:15:bd:0a:68:9b:
58:1b:72:8a:be:a2:11:b4:3a:92:b6:3f:90:8f:2d:d6:8f:fa:
a6:dd:15:1d:8b:15:b8:6c:b6:c8:a2:b6:d9:e4:10:10:64:9f:
24:0d:96:05:c2:87:1c:ef:36:5c:24:64:3f:57:4a:e5:5a:29:
9d:f6:91:ff:6d:b0:94:82:64:b4:f4:f8:da:82:77:7b:4d:08:
2d:7b:9c:52:2d:15:34:dd:a8:dd:e5:2a:da:14:df:49:b5:32:
4a:1d:0d:3c:ae:86:99:78:c7:b6:e6:54:f7:4b:3b:49:cc:2a:
8b:ca:91:93:8a:89:0f:89:32:bc:f1:d1:c1:c5:1b:8e:0c:a3:
88:5f:88:62:87:6a:76:e9:40:6f:e7:11:81:26:1b:bf:0a:c8:
b5:47:69:e3:4b:5f:85:25:c9:1d:9a:39:3b:3d:d0:65:aa:e9:
d5:55:ff:90:0e:7e:b1:50:61:5d:65:71:19:d5:69:fe:5f:96:
fd:93:a5:24:2a:4e:7a:df:d9:5b:ca:90:44:54:33:98:5f:ab:
a3:ab:eb:07:f0:cf:e3:32:c1:00:e4:9b:b6:20:fb:6c:cc:07:
23:bd:10:30:bf:79:16:c1:8e:7e:05:b8:cd:6f:8c:46:65:ec:
08:a7:3e:dc:5a:26:30:a9:07:49:e7:9d:7b:7c:2a:91:a2:6d:
82:57:54:cf:6f:92:ca:3e:80:64:88:d8:d1:e1:56:94:99:cd:
3e:80:d3:8c:25:6d:89:07:4c:0a:2e:f6:00:56:1a:de:71:12:
fd:77:22:3a:0f:e9:02:dc:82:ec:8e:ba:99:e9:e1:f8:07:a1:
b3:59:d3:c0:2c:9f:c3:00:1e:fd:ba:29:6b:b3:b9:fd:d3:7e:
9d:9e:53:0e:5f:f4:b1:e0:c2:eb:61:2c:b4:11:54:11:73:b0:
a9:95:8c:d8:a3:a0:0f:d3:66:d8:57:2a:26:f2:ad:05:0e:56:
fa:8d:95:94:25:aa:74:83:09:cd:12:8d:26:ea:7d:ec:a8:f0:
85:30:cb:ef:f6:6f:9d:2a:6c:8f:8e:0d:1c:33:d8:6c:55:da:
be:4e:14:eb:ed:5c:76:7c