Security certificates for eshail.batc.org.uk

Ideas, technical topics, help and discussion for ATV enthusiasts
Forum rules
This forum is run by the BATC (British Amateur Television Club), it is service made freely available to all interested parties, please do not abuse this privilege.

Thank you
Post Reply
G4EWJ
Posts: 1456
Joined: Wed Feb 17, 2010 10:11 am

Security certificates for eshail.batc.org.uk

Post by G4EWJ » Sat Jun 08, 2024 7:29 pm

Could someone provide me with the .pem and .der format security certificates for eshail.batc.org.uk please. I'm trying to understand this area of programming.

If I export the certificate from a browser and get it with openssl, they're not the same, which is confusing.

Brian

G0MXW
Posts: 27
Joined: Thu Sep 29, 2011 4:59 pm

Re: Security certificates for eshail.batc.org.uk

Post by G0MXW » Sat Jun 08, 2024 8:52 pm

Brian,
Goto https://crt.sh/?q=eshail.batc.org.uk. Shows all certs issued for this domain. current one is 126522762040. click on this gives full certificate breakdown. Left column you can download the PEM. PEM is ascii format, DER is binary format, so to convert one to the other using openssl see https://www.ssl.com/guide/pem-der-crt-a ... -heading-6
As far as i understand the workflow the info presented to you via browser is after the PEM cert has been validated and things like issuers public ssh key are not needed post validation i.e. browser is giving you cut down post processed version of cert for export. I stand to be corrected by higher minds though

Dave G0MXW

G4EWJ
Posts: 1456
Joined: Wed Feb 17, 2010 10:11 am

Re: Security certificates for eshail.batc.org.uk

Post by G4EWJ » Sat Jun 08, 2024 9:56 pm

Thanks Dave. It looks like I am using the correct certificate.

The .pem starts with "MIIE8TCC" and ends with "99pWD3Nx". The .der is 1269 bytes long, starts with "30 82 04 f1 30 82 03 d9" and ends with "88 4f f7 da 56 0f 73 71".

The software says to enter the .der as {0x30, 0x82 etc.

I got the software off the internet, so I've no idea if it's any good. I get a 'connection closed' error. When I had the certificate completely wrong, I was getting 'unable to connect'.

Brian

Post Reply

Return to “General ATV Discussion”