Executing:
openssl x509 -in /tmp/client.crt -noout -text -purpose
gives me:
...
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Key Usage:
Digital Signature, Non Repudiation, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Client Authentication
X509v3 Subject Key Identifier:
D5:7D:F1:50:BC:0B:D7:2E:95:DC:40:CF:3F:42:5D:07:63:8C:8A:CF
X509v3 Authority Key Identifier:
keyid:4A:6B:31:17:BE:D6:81:4D:65:BD:B6:D5:DA:BC:03:F5:B6:D1:9B:A7
Signature Algorithm: ecdsa-with-SHA256
30:45:02:20:33:bb:81:d2:15:56:a6:ca:3d:8a:25:c9:2d:79:
c6:70:d6:10:5b:7a:61:56:0f:52:db:d7:91:e5:38:00:34:39:
02:21:00:9b:e1:a4:9a:f6:cb:e9:9d:21:53:fa:6b:1e:76:5f:
e8:f4:23:0c:f2:f8:b9:e9:67:08:f5:7a:70:8c:85:21:10
Certificate purposes:
SSL client : Yes
SSL client CA : No
SSL server : No
SSL server CA : No
Netscape SSL server : No
Netscape SSL server CA : No
S/MIME signing : No
S/MIME signing CA : No
S/MIME encryption : No
S/MIME encryption CA : No
CRL signing : No
CRL signing CA : No
Any Purpose : Yes
Any Purpose CA : Yes
OCSP helper : Yes
OCSP helper CA : No
Time Stamp signing : No
Time Stamp signing CA : No
I have seen that there is a purpose available for Key Usage: https://cryptography.io/en/latest/x509/reference/?highlight=purpose#cryptography.x509.KeyUsage
Is there any possibility to obtain/check these values in cryptography?
Executing:
gives me:
I have seen that there is a purpose available for Key Usage: https://cryptography.io/en/latest/x509/reference/?highlight=purpose#cryptography.x509.KeyUsage
Is there any possibility to obtain/check these values in cryptography?