|
I could not handle the timestamp problem.
The command below just get the valid period. So change the system time to match before sign.
openssl pkcs12 -info -in cs1.pfx -nodes -legacy | openssl x509 -noout -dates
Enter Import Password:
MAC: sha1, Iteration 2000
MAC length: 20, salt length: 20
PKCS7 Data
Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2000
PKCS7 Encrypted data: pbeWithSHA1And40BitRC2-CBC, Iteration 2000
Certificate bag
Certificate bag
Certificate bag
notBefore=Nov 22 00:00:00 2013 GMT
notAfter=Nov 22 23:59:59 2014 GMT
openssl pkcs12 -info -in cs20160224_w.pfx -nodes -legacy | openssl x509 -noout -dates
Enter Import Password:
MAC: sha1, Iteration 2000
MAC length: 20, salt length: 20
PKCS7 Data
Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2000
PKCS7 Encrypted data: pbeWithSHA1And40BitRC2-CBC, Iteration 2000
Certificate bag
Certificate bag
Certificate bag
Certificate bag
notBefore=Jul 2 01:58:35 2014 GMT
notAfter=Jul 2 01:58:35 2015 GMT
openssl pkcs12 -info -in cs_20151120.pfx -nodes -legacy | openssl x509 -noout -dates
Enter Import Password:
MAC: sha1, Iteration 2000
MAC length: 20, salt length: 20
PKCS7 Data
Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2000
PKCS7 Encrypted data: pbeWithSHA1And40BitRC2-CBC, Iteration 2000
Certificate bag
Certificate bag
Certificate bag
notBefore=Jan 7 00:00:00 2014 GMT
notAfter=Jan 7 23:59:59 2015 GMT
|