How can I decode a SSL certificate using python?

by

Python’s standard library, even in the latest version, does not include anything that can decode X.509 certificates. However, the add-on cryptography package does support this. Quoting an example from the documentation:

>>> from cryptography import x509
>>> from cryptography.hazmat.backends import default_backend
>>> cert = x509.load_pem_x509_certificate(pem_data, default_backend())
>>> cert.serial_number
2

Another add-on package that might be an option is pyopenssl. This is a thin wrapper around the OpenSSL C API, which means it will be possible to do what you want, but expect to spend a couple days tearing your hair out at the documentation.

If you can’t install Python add-on packages, but you do have the openssl command-line utility,

import subprocess
cert_txt = subprocess.check_output(["openssl", "x509", "-text", "-noout", 
                                    "-in", certificate])

should produce roughly the same stuff you got from your web utility in cert_txt.

Incidentally, the reason doing a straight-up base64 decode gives you binary gobbledygook is that there are two layers of encoding here. X.509 certificates are ASN.1 data structures, serialized to X.690 DER format and then, since DER is a binary format, base64-armored for ease of file transfer. (A lot of the standards in this area were written way back in the nineties when you couldn’t reliably ship anything but seven-bit ASCII around.)

More Related Contents:

  1. Why do HTTPS requests produce SSL CERTIFICATE_VERIFY_FAILED error?
  2. Mac OSX python ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:749)
  3. ssl.SSLError: tlsv1 alert protocol version
  4. How to add a custom CA Root certificate to the CA Store used by pip in Windows?
  5. Python Urllib2 SSL error
  6. Requests (Caused by SSLError(“Can’t connect to HTTPS URL because the SSL module is not available.”) Error in PyCharm requesting website
  7. certificate verify failed: unable to get local issuer certificate
  8. Python and OpenSSL version reference issue on OS X
  9. Python requests.exceptions.SSLError: EOF occurred in violation of protocol
  10. Python requests SSL error – certificate verify failed
  11. “SSL: certificate_verify_failed” error when scraping https://www.thenewboston.com/
  12. HTTPS connection Python
  13. Unable to install Python packages using pip in Ubuntu Linux: InsecurePlatformWarning, SSLError, tlsv1 alert protocol version
  14. Opening a SSL socket connection in Python
  15. How can I create a random number that is cryptographically secure in python?
  16. ImportError: cannot import name HTTPSHandler using PIP
  17. Python getting common name from URL using ssl.getpeercert()
  18. SSL error with Python requests despite up-to-date dependencies
  19. Certifacte verify failed: certificate has expired (_ssl.c:1108)
  20. pip: cert failed, but curl works
  21. What does “SSLError: [SSL] PEM lib (_ssl.c:2532)” mean using the Python ssl library?
  22. brew installation of Python 3.6.1: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed
  23. How to get around python requests SSL and proxy error?
  24. How do you verify an RSA SHA1 signature in Python?
  25. How to enable FIPS mode for libcrypto and libssl packaged with Python?
  26. Python Requests – SSL error for client side cert
  27. PyCrypto problem using AES+CTR
  28. Connecting to ‘Explicit FTP over TLS’ in Python (??)
  29. SSLError: sslv3 alert handshake failure
  30. How to encrypt text with a password in python?

Leave a Comment