Examples:
Certificate:
Issued to:
    Common Name (CN)           John Doe
    Country (C)                US
    E-mail address (E)         john.do@hotmail.com

Issued by:
    Common Name (CN)           Thawte Personal Freemail Issuing CA
    Organisation (O)           Thawte Consulting (Pty) Ltd.
    Country (C)                ZA

    Version                    3
    Serial Number              43 5A D4 40 76 4B ...
    Signature Algorithm        MD5 with RSA Encryption (1 2 840 113549 1 1 4)

Validity:
    Not Valid Before           Monday, Feburary 6, 2006 12:26:20 AM America/New_York
    Not Valid After            Tuesday, Feburary 6, 2007 12:26:20 AM America/New_York

Public Key Info:
     Algorithm                 RSA Encryption (1 2 840 113549 1 1 1)
     Public Key                128 bytes: AF E3 ...
     Key Size                  1024 bits
     Key Usage                 Any
     
     Signatue                  128 bytes: 43 22 ...
---------:     
     Extension                 Basic Constraints (2 5 29 19 )
     Critical                  YES
     Certificate Authority     NO

     Extension                 Subject Alternative Name  (2 5 29 17 )
     Critical                  NO
     
     RFC 822 Name              john.do@hotmail.com

Fingerprints:
     MD2 Fingerprint           61:F6:D5:A8:2C:E3:EE:3F:B0:C1:4D:D6:B8:E6:3C:FA
     MD5 Fingerprint           68:50:CD:98:DF:3C:F6:7D:81:05:74:72:FC:E1:E2:A9
    SHA1 Fingerprint           6C:F2:22:E6:DE:57:F8:45:05:B3:1F:68:CD:98:52:E3:AE:FA:EA:7F


MIME attachment
-----BEGIN PKCS7----
-----END PKCS7----
KEY;X509;ENCODING=BASE64:
   MIIEczCCA9ygAwIBAgIQXqZDMWeC/paX54.....
   
=======================================================
   Subject: M2Crypto S/MIME testing
    MIME-Version: 1.0
    Content-Type: multipart/signed ; protocol="application/x-pkcs7-signature" ;
                  micalg=sha1 ; boundary="----3C93156FC7B4EBF49FE9C7DB7F503087"
    
    This is an S/MIME signed message
    
    ------3C93156FC7B4EBF49FE9C7DB7F503087
    a sign of our times
    ------3C93156FC7B4EBF49FE9C7DB7F503087
    Content-Type: application/x-pkcs7-signature; name="smime.p7s"
    Content-Transfer-Encoding: base64
    Content-Disposition: attachment; filename="smime.p7s"
    
    MIIE8AYJKoZIhvcNAQcCoIIE4TCCBN0CAQExCzAJBgUrDgMCGgUAMCIGCSqGSIb3
    DQEHAaAVBBNhIHNpZ24..........
    
    ------3C93156FC7B4EBF49FE9C7DB7F503087--
 ===========================================================
 Encrypted Message:
 Subject: M2Crypto S/MIME testing
    MIME-Version: 1.0
    Content-Disposition: attachment; filename="smime.p7m"
    Content-Type: application/x-pkcs7-mime; name="smime.p7m"
    Content-Transfer-Encoding: base64
    
    MIIBVwYJKoZIhvcNAQcDoIIBSDCCAUQCAQAxggEAMIH9AgEAMGYwYTELMAkGA1UE
    BhMCU0cxETAPBgNVBAoTCE0yQ3J5cHRvMRkwFwYDVQQDExBTL01JTUUgUmVjaXBp
    ZW50MSQwIgYJKoZIhvcNAQkBFhVyZWNpcGllbnRAZXhhbXBsZS5kb20CAQAwDQYJ
    KoZIhvcNAQEBBQAEgYCBaXZ+qjpBEZwdP7gjfzfAtQitESyMwo3i+LBOw6sSDir6
    FlNDPCnkrTvqDX3Rt6X6vBtTCYOm+qiN7ujPkOU61cN7h8dvHR8YW9+0IPY80/W0
    lZ/HihSRgwTNd7LnxUUcPx8YV1id0dlmP0Hz+Lg+mHf6rqaR//JcYhX9vW4XvjA7
    BgkqhkiG9w0BBwEwFAYIKoZIhvcNAwcECMN+qya6ADywgBgHr9Jkhwn5Gsdu7BwX
    nIQfYTYcdL9I5Sk=
    
 ==============================================================
 If you receive signed emails with Outlook, the certificates will
 appear in the address book.
 
 BEGIN:VCARD
VERSION:2.1
N:Bond;James;;Mr.
FN:James Bond
TEL;WORK;VOICE:+7 (1) 234-567
KEY;X509;ENCODING=BASE64:
    MIICrTCCAhagAwIBAgIDBR7sMA0GCSqGSIb3DQEBAgUAMIGSMQswCQYDVQQGEwJaQTEVMBMG
    ...
    SxIbYWxGIkCi+DGSTfMTLWXOLe3ZQ2eqbMDNRRofoJ40o3ec2kNz7s6=

EMAIL;PREF;INTERNET:james@bond.co.uk
END:VCARD
    

PGP (pgp.com)

PGP can be used for:
1. authentication and data integrity, by computing a hash and combining it with the senders private key to create a signature.
2. Encrypt the text itself

Example of PGP message with hash:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Message in clear text.

-----BEGIN PGP SIGNATURE-----
Version: PGP Universal 2.0.2

iQEVAwUBQ3DJVDYbdG1zHJRxAQgIuQf/Rch7vOrvW4XgOZDJRUN73fMe85+hbC3t
+84XgzJDcj0KH1HTBr8vMymS6ui53v8aSZnUdO4QwvQA265Kr1ya/fHa+msYEU2P
eX36VneNRsbBne092RfIoOxK2HO0OUluG1oEWooGoCbIo6yMPVMZzhRUFTAeyhVX
1f9Lyi+ZafhzDbZnH+SlsPwqg4P0+25EVRQ0cDBWl3/HgEMm7PrxQXm98fQi33sb
gsoCZI5CAd6QipLAYjD6RCxJFVE2ubtXVBG64IwgS8bwp9VsdQSBm4k94aImATtL
j8T23ulzJxyvvBrSiHQTMvP2UhUCscct1BVeQOqYFd4QvK7p3zSHGQ==
=n1C8
-----END PGP SIGNATURE-----


Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029973 (0xfb755)
        Signature Algorithm: md5WithRSAEncryption
        Issuer: C=ZA, O=Thawte Consulting (Pty) Ltd., CN=Thawte Personal Freemail Issuing CA
        Validity
            Not Before: Oct 21 16:47:41 2005 GMT
            Not After : Oct 21 16:47:41 2006 GMT
        Subject: CN=Thawte Freemail Member/emailAddress=foley@mit.edu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (2048 bit)
                Modulus (2048 bit):
                    00:f7:ef:a2:19:1d:72:b8:3e:99:6b:b0:d4:63:aa:
                    53:64:f1:fa:cc:10:e6:11:ac:cf:1d:e6:fd:08:ef:
                    db:65:44:7f:7b:1d:62:53:82:6f:96:d9:d3:b3:c6:
                    58:cc:23:53:a0:f9:d2:c6:66:d3:92:2e:49:76:6c:
                    85:6f:a4:d0:fc:ac:99:48:c7:71:61:07:e9:1f:71:
                    2f:18:ea:c5:7c:36:60:b7:b4:1e:04:4d:d4:7d:01:
                    64:67:56:07:99:92:7f:2d:3a:8c:27:18:07:2f:9f:
                    f0:30:7c:8d:2d:3d:6d:15:ec:fc:6b:1b:ee:0c:09:
                    f9:fc:3c:6b:6b:4f:f2:d8:66:0c:f5:6c:91:22:d9:
                    dc:00:e6:61:e0:ca:17:bd:1e:54:90:4c:25:1c:14:
                    18:ab:d2:ea:73:93:0b:94:81:3e:98:77:93:80:0f:
                    1e:0c:8f:39:d9:ec:29:8a:f3:66:01:2e:4c:1f:9d:
                    b2:89:88:9e:ca:d3:f7:a2:2b:46:b1:60:bc:4c:f2:
                    6e:18:04:bc:18:ae:ed:4b:28:d3:f7:79:71:3d:0c:
                    78:50:cc:1d:d2:8b:91:64:78:44:3f:52:be:a0:34:
                    fc:d0:e4:da:fd:4a:a3:65:ea:e6:de:d5:8c:84:f9:
                    13:ba:4c:c5:2b:b0:b0:b0:9c:82:39:cb:d1:13:2b:
                    c1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
            Netscape Cert Type: 
                SSL Client, S/MIME
            X509v3 Subject Alternative Name: 
                email:foley@mit.edu
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: md5WithRSAEncryption
        4a:17:9b:ba:fd:67:f6:02:7a:a4:10:f8:08:26:a1:7e:68:b6:
        a4:05:69:10:cb:be:9a:da:52:b7:55:b2:b4:05:75:a6:f5:13:
        05:9b:03:b6:53:87:2e:58:3d:66:cd:a0:9b:ab:79:10:8c:97:
        14:b3:8c:66:89:2e:71:ae:49:68:57:7d:c5:86:e2:24:ee:7c:
        f2:70:6f:26:f9:33:00:b7:8c:a6:74:df:02:16:60:c1:56:c2:
        98:6a:14:aa:bf:01:85:25:28:21:da:54:50:cc:62:c5:27:58:
        c9:ad:4c:24:94:8a:76:4b:e3:1c:bc:fa:d6:b5:9d:8c:20:95:
        24:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Security
Glossary

Return to Secure Email

last updated 5 Feb 2006