LAB: Certificates

Go to an https website of your choice, click on the icon immediately to the left of the URL, and navigate your way to downloading/exporting the website's certificate.

Given the certificate (say, carleton.edu.pem), run this command:

openssl x509 -in carleton.edu.pem -text

Go back to that browser icon and get the "root" certificate and run the openssl command on it.


Your Carleton user name, lower case:

What heading name does openssl use to label the identity of the person/entity (carleton.edu, or whatever) for whom this certificate is constructed?

What public key algorithm does this certificate use?

What signature algorithm does this certificate use?

When does this certificate expire?

What is the name of the certificate authority that created and signed this certificate?

What heading does openssl use to label the name of the CA?