[I've had quite a few requests for this so I'm sending this annoucement to the
three most appropriate lists, apologies if you see it more than once]
I've just updated my ASN.1 dump/diagnostic utility to handle the BER a bit
better, which means you can now display things like PKCS #7 objects and (in
general) anything else which mixes BER and DER-encoded data. The program is
aware of most of the common crypto-related object identifiers and types, so
it'll give you a proper description of what it is you're looking at. Here's
some sample output from the start of a cert:
0 30 618: SEQUENCE {
4 30 467: SEQUENCE {
8 2 4: INTEGER 830525701
14 30 13: SEQUENCE {
16 6 9: OBJECT IDENTIFIER
: md5withRSAEncryption (1 2 840 113549 1 1 4)
27 5 0: NULL
: }
29 30 125: SEQUENCE {
31 31 11: SET {
33 30 9: SEQUENCE {
35 6 3: OBJECT IDENTIFIER countryName (2 5 4 6)
40 13 2: PrintableString 'Ca'
: }
: }
[etc]
Hopefully the program will prove useful for picking apart certs and data
objects for debugging and diagnostic purposes, especially now that it handles
BER data properly. You can get it from
http://www.cs.auckland.ac.nz/~pgut001/dumpasn1.c.
Peter.