21 lines
		
	
	
		
			650 B
		
	
	
	
		
			Plaintext
		
	
	
	
			
		
		
	
	
			21 lines
		
	
	
		
			650 B
		
	
	
	
		
			Plaintext
		
	
	
	
| subjhash
 | |
| 
 | |
| This tool prints the SHA-256 hash of an X.509 certificate's subject
 | |
| info or issuer fields. It can also verify that the hashes of the
 | |
| subject are the same between two certificates.
 | |
| 
 | |
| Usage: subjhash [-im] certs...
 | |
| 
 | |
| Flags:
 | |
| 	-i	Print hash of issuer field.
 | |
| 	-m	Matching mode. This expects arguments to be in the form of
 | |
| 		pairs of certificates (e.g. previous, new) whose subjects
 | |
| 		will be compared. For example,
 | |
| 
 | |
| 			subjhash -m ca1.pem ca1-renewed.pem	\
 | |
| 				ca2.pem ca2-renewed.pem
 | |
| 
 | |
| 		will exit with a non-zero status if the subject in the
 | |
| 		ca1-renewed.pem certificate doesn't match the subject in the
 | |
| 		ca.pem certificate; similarly for ca2.
 |