Tr064.cer

From Fritz!Box
Jump to: navigation, search

AVM Wiki >> Konfiguration >> tr064.cer @ whmf   -   IRC-Chat   -   hu nl it English
Community Modelle Zubehör Environment Konfiguration Shell-Befehle Software Freetz Lexikon Tipps+Tricks Bilder

TFFS-Konfig Fest-Konfig Binär Tempfiles Logs Sockets Devices ProcFS Interfaces Daten UI-Module Webinterface Todo

Contents

Konfiguration

TR-064-fähige Telekom-Derivate (Telekom und Congstar Modelle) nutzen einen eigenen Public Key für TR-064. Auffällig ist dabei das das C503V-Zertifikat im Oktober 2011 verfällt, alle anderen im Juli 2012.

Aufgerufen von

  • ctlmgr (W503V, C503V, W701V, C701V, W721V, W722V, W900V, W920V, gezielt tcom und congstar Branding)
  • igdd (W701V, C701V 4.58, W721V, W722V, W900V, ohne Pfad, evtl. Kopie/Link im RAM)
  • upnpd (W503V, C701V 4.80, W920V, ohne Pfad, evtl. Kopie/Link im RAM)

Versionen

W503V+W721V+W722V+W920V

  • md5sum 3e57c85f8589c704c6dfb4d8df45ffaf (W503V, W721V, W722V, W920V)
openssl x509 -noout -text -in /etc/default.Fritz_Box_DECT_W920V/tcom/tr064.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a3:25:b1:da:c2:97:bc:21:43:1b:9f:22:b9:cd:9d
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign International Server CA - Class 3, OU=www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign
        Validity
            Not Before: Jan  7 00:00:00 2009 GMT
            Not After : Jan  6 23:59:59 2013 GMT
        Subject: C=DE, ST=Hessen, L=Darmstadt, O=Deutsche Telekom AG, OU=P&I PSO/DCS, CN=speedport.ip
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:b4:1d:28:52:35:68:ab:ec:70:81:2c:a1:6c:b0:
                    <snip>
                    88:fd:e4:96:8e:30:9d:1a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: 
                Digital Signature, Key Encipherment
            X509v3 CRL Distribution Points: 
                URI:http://crl.verisign.com/Class3InternationalServer.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Netscape Server Gated Crypto, Microsoft Server Gated Crypto, TLS Web Server Authentication, TLS Web Client Authentication
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            1.3.6.1.5.5.7.1.12: 
                0`.^.\0Z0X0V..image/gif0!0.0...+......Kk.(.....R8.).K..!..0&.$http://logo.verisign.com/vslogo1.gif
    Signature Algorithm: sha1WithRSAEncryption
        26:30:59:e1:c3:72:79:2a:5c:06:65:22:3f:c3:91:2e:10:0b:
        <snip>
        62:83

W701V+C701V+W900V

  • md5sum 9fe5facb85eaf930cc6087cbdfb0090c (W701V, C701V, W900V)
openssl x509 -noout -text -in /etc/default.Fritz_Box_SpeedportW701V/congstar/tr064.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
        Signature Algorithm: md5WithRSAEncryption
        Issuer: C=DE, ST=Hessen, L=Weiterstadt, O=T-Online International AG, OU=IT-O, CN=CERT-ADMIN_RootCA/emailAddress=cert-admin@t-online.net
        Validity
            Not Before: Feb  5 14:05:41 2007 GMT
            Not After : Jul  5 14:05:41 2012 GMT
        Subject: C=DE, ST=Hessen, O=Deutsche Telekom AG, T-Com, OU=SpeedportSerie_AVM, CN=speedport.ip/emailAddress=cert-admin@t-online.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:b5:16:1f:cb:73:aa:dc:b9:55:ac:7e:21:dd:46:
                    <snip>
                    bd:cf:ca:f9:49:0a:7f:56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Comment: 
                OpenSSL Generated Certificate
            X509v3 Subject Key Identifier: 
                2A:67:6D:2E:D4:37:5E:CE:4E:42:44:F5:89:AF:63:16:CE:D0:4C:FB
            X509v3 Authority Key Identifier: 
                keyid:83:BE:F4:C4:71:BB:2C:09:8E:86:64:CF:80:7F:FC:60:36:D3:6E:CA
                DirName:/C=DE/ST=Hessen/L=Weiterstadt/O=T-Online International AG/OU=IT-O/CN=CERT-ADMIN_RootCA/emailAddress=cert-admin@t-online.net
                serial:00

    Signature Algorithm: md5WithRSAEncryption
        c3:c6:e9:59:9d:25:cb:7a:7b:a3:32:c4:92:5a:8f:0e:14:0a:
        <snip>
        d1:1d

C503V

  • md5sum 38b3440681bdd4c7c6e5eb1561af62cb (C503V)
openssl x509 -noout -text -in /etc/default.Fritz_Box_SpeedportW503V/congstar/tr064.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:dc:f1:96:66:95:38:86:ed:47:c3:d1:da:97:ad:e0
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)05, CN=VeriSign Class 3 Secure Server CA
        Validity
            Not Before: Oct 30 00:00:00 2008 GMT
            Not After : Oct 30 23:59:59 2011 GMT
        Subject: C=DE, ST=Nordrhein-Westfalen, L=Koeln, O=Congstar GmbH, OU=Terms of use at www.verisign.com/rpa (c)05, CN=congstar.box
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (2048 bit)
                Modulus (2048 bit):
                    00:95:ff:a5:72:7d:d0:63:0a:a3:fb:25:39:14:d4:
                    <snip>
                    45:3b:4c:f1:60:eb:43:b6:8d:e4:7d:ca:01:9d:49:
                    b1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: 
                Digital Signature, Key Encipherment
            X509v3 CRL Distribution Points: 
                URI:http://SVRSecure-crl.verisign.com/SVRSecure2005.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                keyid:6F:EC:AF:A0:DD:8A:A4:EF:F5:2A:10:67:2D:3F:55:82:BC:D7:EF:25

            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://SVRSecure-aia.verisign.com/SVRSecure2005-aia.cer

            1.3.6.1.5.5.7.1.12: 
                0`.^.\0Z0X0V..image/gif0!0.0...+......Kk.(.....R8.).K..!..0&.$http://logo.verisign.com/vslogo1.gif
    Signature Algorithm: sha1WithRSAEncryption
        36:7f:90:04:30:0f:6f:5f:fc:fc:07:65:0a:af:63:0a:fc:96:
        <snip>
        f3:56:89:7c

Siehe auch

Überwachung und Einrichtung: (129) - Kleingedrucktes ist laufende Entwicklung.