On 04/03/2019 13:16, Jan Just Keijser wrote: > On 04/03/19 10:21, Wolfgang Knauf wrote: >> Hi, >> >> the output is this: >> >> C:\Program Files\OpenVPN\bin>openssl.exe asn1parse -i -in >> ..\config\SSL_HUG1@xxxxxxxxxxxxxxxxxxxxxxx\l1139218.vt-security.de.user.crt >> Error: offset too large >> >> Would it be OK if I send the crt file to only your mail adress? I don't feel >> save by posting it to the mailing list ;-)? >> >> > I ran into the "offset too large" problem myself with my own certs as well. It > turns out the 'asn1parse' util only likes PEM blobs, i.e. the parts starting > with --BEGIN CERTIFICATE-- asn1parse will expect PEM by default but is perfectly capable of processing raw DER too. Just use the "-inform DER" option. Matt