On Wed, Apr 12, 2023 at 10:41:39PM -0400, Viktor Dukhovni wrote:
> If you really must go out on a limb, OpenSSL 3.0 would output:
>
> ...
> X509v3 extensions:
> X509v3 Subject Key Identifier:
> E7:9B:E2:2A:AD:8A:6C:3A:CB:76:51:E5:8E:07:98:22:97:E1:73:A2
> X509v3 Authority Key Identifier:
> B4:11:33:F1:D7:E2:5E:F7:53:9E:20:22:10:4F:86:06:BF:1F:C9:5E
> X509v3 Basic Constraints:
> CA:FALSE
> X509v3 Subject Alternative Name:
> othername: SmtpUTF8Mailbox::виктор@example.org
> ...
Also, IIRC recent work by Nico Williams on Heimdal (perhaps still master
branch if 8.0 has not been released yet), has added support to "hxtool"
(and more generally the Heimdal ASN.1 compiler, ...) to output ASN.1
objects (including certificates) in JSON, which is of course
machine-parseable.
--
Viktor.
