Generate an ASN.1 Dump of a Certificate

This section describes how to display the ASN.1 structure of a certificate using the EJBCA CLI.

You can generate an ASN.1 dump of a certificate to inspect its internal structure and encoding. This is useful for troubleshooting, validation, or understanding how certificate fields are represented at the binary level.

Prerequisites

• Access to the EJBCA command-line interface

• A certificate file in either PEM or DER format

Command Syntax

Run the following command from the EJBCA installation directory:

$ bin/ejbca.sh asn1dump <certificate-file>

• <certificate-file>: Path to the certificate file (PEM or DER encoded)

Example

$ bin/ejbca.sh asn1dump managementca.pem