Comment puis-je vérifier si le fichier de certificat que j'ai est au format .pem ?

Question

J'ai un fichier de certificat racine et je ne sais pas s'il est au format .pem Comment vérifier s'il est au format .pem

Answer 1

Certificats DER vs CRT vs CER vs PEM et comment les convertir

Citation de la page d'assistance :

 View
====

Even though PEM encoded certificates are ASCII they are not human
readable.  Here are some commands that will let you output the
contents of a certificate in human readable form;

View PEM encoded certificate
----------------------------

Use the command that has the extension of your certificate replacing
cert.xxx with the name of your certificate

openssl x509 -in cert.pem -text -noout
openssl x509 -in cert.cer -text -noout
openssl x509 -in cert.crt -text -noout

If you get the folowing error it means that you are trying to view a DER encoded certifciate and need to use the commands in the "View DER encoded certificate 
below"

unable to load certificate
12626:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:647:Expecting: TRUSTED CERTIFICATE View DER encoded Certificate


View DER encoded Certificate
----------------------------

openssl x509 -in certificate.der -inform der -text -noout

If you get the following error it means that you are trying to view a PEM encoded certificate with a command meant for DER encoded certs. Use a command in the "View PEM encoded certificate above

unable to load certificate
13978:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:tasn_dec.c:1306:
13978:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:tasn_dec.c:380:Type=X509

Answer 2

Un certificat au format .pem sera très probablement lisible en ASCII. Il aura une ligne -----BEGIN CERTIFICATE----- , suivie de données encodées en base64, suivies d'une ligne -----END CERTIFICATE----- . Il peut y avoir d'autres lignes avant ou après.

Answer 3

Référence CRL,CRT,CSR,NOUVELLE CSR,CLÉ PRIVÉE, CLÉ PUBLIQUE Analyseur

Liste de révocation de certificats

 -----BEGIN X509 CRL-----
-----END X509 CRL-----

tube cathodique

 -----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----

RSE

 -----BEGIN CERTIFICATE REQUEST-----
-----END CERTIFICATE REQUEST-----

NOUVELLE RSE

 -----BEGIN NEW CERTIFICATE REQUEST-----
-----END NEW CERTIFICATE REQUEST-----

PEM

 -----BEGIN RSA PRIVATE KEY-----
-----END RSA PRIVATE KEY-----

PKCS7

 -----BEGIN PKCS7-----
-----END PKCS7-----

CLÉ PRIVÉE

 -----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----