l 2048 subject {CN=PKI Tester, CN=PKI Developer, C=US, O=Tcllib, OU=Developers Group, EMAIL=developers@test.tcllib} e 65537 n 19984679213834903938396945285830215100476153677330355816419903548686152309716994349323823466672141847780954657332078181502513882654400571217207307550810484032052106511210686836053844877640683881435027476660639578918039929257473099281182354976120906361086234965459422002218738932867454832729160902190093382896094364425255482492665873456097170207334994617658972675896671788537225597847733001993842123164536658936700822393035314095676482939561119599361829058450714423941407943707485372524041642870184383611041779489779814183258119862972783175323644559719133810480022053759569760366105119081197006955901162756909048672761 type rsa extensionRequest {keyUsage {1 {511 digitalSignature nonRepudiation keyEncipherment dataEncipherment keyAgreement keyCertSign cRLSign encipherOnly decipherOnly}} extKeyUsage {1 {serverAuth clientAuth codeSigning emailProtection timeStamping OCSPSigning 1.3.6.1.4.1.311.2.1.21 1.3.6.1.4.1.311.2.1.22 1.3.6.1.4.1.311.10.3.1 1.3.6.1.4.1.311.10.3.4 1.3.6.1.5.5.7.3.17 ipsecEndSystem ipsecTunnel ipsecUser}} id-ce-basicConstraints {1 0 -1} basicConstraints {1 {0 -1}} subjectAltName {0 {dNSName test.tcllib.nosuchdomain dNSName www.test.tcllib.nosuchdomain iPAddress 192.168.1.1 iPAddress 0013:0000:0000:0000:0000:0000:0000:0017 uniformResourceIdentifier http://test.tcllib rfc822Name noone@test.tcllib registeredID 1.6.7.8.11 directoryName {C=UK, CN=PKI Developer} otherName {1.2.3.4 a0170c15537472696e6720696e207574663820666f726d6174}}} issuerAltName {0 {dNSName ca.test.tcllib}} cRLDistributionPoints {0 {{distributionPoint {fullName {uniformResourceIdentifier http://test.tcllib/my.crl}} reasons {195 keyCompromise certificateHold privilegeWithdrawn} cRLIssuer {directoryName {C=US, O=Tcllib, CN=Tcllib CRL Issuer}}} {distributionPoint {nameRelativeToCRLIssuer {CN=Tcllib CRL DP}} reasons {15 keyCompromise cACompromise affiliationChanged}} {distributionPoint {fullName {uniformResourceIdentifier http://crl.test.tcllib}} cRLIssuer {directoryName {C=US, O=Tcllib, CN=Tcllib CRL Issuer}}}}} freshestCRL {0 {{distributionPoint {fullName {uniformResourceIdentifier http://crl.test.tcllib}} cRLIssuer {directoryName {C=US, O=Tcllib, CN=Tcllib CRL Issuer}}}}}}