Certificate Viewer utility (viewcert)

Displays values within a Public Key Infrastructure (PKI) object, converts the encoding of PKI objects, or encrypts and decrypts private keys.

Syntax

viewcert [ options ] input-file

Option	Description
@data	Reads in options from the specified environment variable or configuration file. See Configuration files. To protect passwords or other information in the configuration file, use the File Hiding utility to obfuscate the contents of the configuration file. See File Hiding utility (dbfhide).
-d	DER-encodes the output. This option is only useful with the -o option. It cannot be used with -p. By default, viewcert outputs the PKI object in a readable text format.
-ip input-password	Specifies the password needed to decrypt the private key if the input-file contains an encrypted private key.
-o filename	Specifies the file that viewcert should write the output to. By default, viewcert writes the output to the command prompt window where it is running.
-op output-password	Specifies the password viewcert should use to encrypt a private key. This option is only useful with -d or -p. By default, private keys are not encrypted.
-p	PEM-encodes the output. This option is only useful with the -o option. It cannot be used with -d. By default, viewcert outputs the PKI object in a readable text format.
-p1	Uses PKCS #1 to encode unencrypted RSA private keys instead of the default, PKCS #8.
-q	Runs in quiet mode—messages are not displayed.
input-file	Specifies a file that must be a DER- or PEM-encoded PKI object.
-3des	Specifies to use 3DES encryption instead of AES when specifying -p, -ip, and -op options. Do not use this option if you are running in FIPS mode.

Privileges

Remarks

The viewcert utility can be used to view the following types of PKI objects:

X.509 certificates
certificate requests
private keys
certificate revocation lists (CRLs)

Viewcert can also be used to convert between DER and PEM encoding types and to encrypt or decrypt private keys.

The viewcert utility supports RSA objects.

Example

The following example allows you to view the sample RSA certificate that is included with SQL Anywhere. From the %SQLANYSAMP16%\Certificates directory, run the following command:

viewcert rsaroot.crt

This example produces the following output:

SQL Anywhere X.509 Certificate Viewer Version 16.0.0.1403

X.509 Certificate
-----------------
Common Name:             RSA Root
Country Code:            test
State/Province:          test
Locality:                test
Organization:            test
Organizational Unit:     test
Issuer:                  RSA Root
Serial Number:           89e3f123dcb74624a9ae78a845ccd183
Issued:                  Jan 29, 2012  11:45:00
Expires:                 Jan 30, 2032  11:45:00
Signature Algorithm:     RSA, SHA1
Key Type:                RSA
Key Size:                2048 bits
Basic Constraints:       Is a certificate authority, path length limit: 10
Key Usage:               Certificate Signing, CRL Signing

Discuss this page in DocCommentXchange.