Re: Sample certificate sites

[Mark Bartel <mbartel@xxxxxxxxxxxx>]

Here's a short list of places to get certificates.  When I have more time, I'll go through my bookmarks and make a fuller list and also make available some sample certificates I've created (including ones containing BMPString and UniversalString values, for which I still haven't found a source).

Verisign: http://www.verisign.com/ (both for creating certificates and querying for certificates; you can find some old Netscape certificates here that contain different extensions marked critical)

Entrust: http://www.entrust.com/

Xcert: http://www.xcert.com/

Some useful tools are SSLeay (http://psych.psy.uq.oz.au/~ftp/Crypto/), Certificate Viewer (beta - http://www.iol.ie/~formal), Secude (beta - http://www.darmstadt.gmd.de/secude), and the Cryptoapi 2.0 beta, all of which contain certificate viewers.  Certificate Viewer also contains about a dozen sample certificates from all kinds of different places. The Cryptoapi viewer is the only one that will actually parse BMPString and UniversalString values.

- Mark Bartel