Certificate Viewer utility (viewcert)

Displays values within a Public Key Infrastructure (PKI) object, converts the encoding of PKI objects, or encrypts and decrypts private keys.

Syntax

viewcert [ options ] input-file

Option	Description
-d	DER-encodes the output. This option is only useful with the -o option. It cannot be used with -p. By default, viewcert outputs the PKI object in a readable text format.
-ip input-password	Specifies the password needed to decrypt the private key if the input-file contains an encrypted private key.
-o output-file	Specifies the file that viewcert should write the output to. By default, viewcert writes the output to the command prompt window where it is running.
-op output-password	Specifies the password viewcert should use to encrypt a private key. This option is only useful with -d or -p. By default, private keys are not encrypted.
-p	PEM-encodes the output. This option is only useful with the -o option. It cannot be used with -d. By default, viewcert outputs the PKI object in a readable text format.
input-file	Specifies a file that must be a DER- or PEM-encoded PKI object.

Remarks

The viewcert utility can be used to view the following types of PKI objects:

X.509 certificates
certificate requests
private keys
certificate revocation lists (CRLs)

Viewcert can also be used to convert between DER and PEM encoding types and to encrypt or decrypt private keys.

The viewcert utility supports RSA and ECC objects. To view ECC objects, you must order a separate license. See Separately licensed components.

Example

The following example allows you to view the sample RSA certificate that is included with SQL Anywhere:

viewcert rsaroot.crt

This example produces the following output:

SQL Anywhere X.509 Certificate Viewer Version 12.0.1.3149

X.509 Certificate
-----------------
Common Name:             RSA Root
Country Code:            test
State/Province:          test
Locality:                test
Organization:            test
Organizational Unit:     test
Issuer:                  RSA Root
Serial Number:           303031
Issued:                  Apr 15, 2002   9:53:51
Expires:                 Apr 16, 2022   9:53:51
Signature Algorithm:     RSA, MD5
Key Type:                RSA
Key Size:                1024 bits
Basic Constraints:       Is a certificate authority, path length limit: 10
Key Usage:               Certificate Signing, CRL Signing

Discuss this page in DocCommentXchange.