{
  "id": "x509_certificate_fingerprint",
  "kind": "datatype",
  "status": "draft",
  "name": "X.509 certificate fingerprint",
  "doc": "Hash of the DER encoding of an X.509 certificate, as shown by browsers, certificate stores and openssl x509 -fingerprint: hexadecimal octets separated by colons, 20 octets for SHA-1 and 32 octets for SHA-256. The same value without separators looks like a plain SHA-1 or SHA-256 hash.",
  "is_pii": false,
  "categories": [
    "cryptography"
  ],
  "langs": [
    "common"
  ],
  "classification": "identifier",
  "regexp": "^[0-9A-Fa-f]{2}(?::[0-9A-Fa-f]{2}){19}(?:(?::[0-9A-Fa-f]{2}){12})?$",
  "examples": [
    {
      "value": "FF:2D:1B:4E:E9:CD:62:5A:52:CA:49:AF:A1:97:4E:A3:3F:09:ED:35:DB:8E:55:4D:F0:EC:7D:4C:73:A7:72:F2",
      "description": "SHA-256 fingerprint of the example certificate of RFC 7468, section 5.1",
      "valid": true
    },
    {
      "value": "AE:C4:60:61:F4:58:FC:B5:6E:20:4A:11:79:DE:BB:CF:23:7F:1C:53",
      "description": "SHA-1 fingerprint of the same certificate",
      "valid": true
    },
    {
      "value": "AE:C4:60:61:F4:58:FC:B5:6E:20:4A:11:79:DE:BB:CF:23:7F:1C",
      "description": "one octet short (19 instead of 20)",
      "valid": false
    }
  ],
  "links": [
    {
      "type": "wikipedia",
      "url": "https://en.wikipedia.org/wiki/Public_key_fingerprint"
    },
    {
      "type": "doc",
      "url": "https://docs.openssl.org/master/man1/openssl-x509/"
    }
  ],
  "quality": {
    "score": 75,
    "missing": [
      "mapping (Wikidata, Schema.org, ...)",
      "translation",
      "detector coverage"
    ]
  },
  "source": {
    "path": "data/datatypes/any/cryptography/x509_certificate_fingerprint.yaml",
    "url": "https://github.com/apicrafter/metacrafter-registry/blob/main/data/datatypes/any/cryptography/x509_certificate_fingerprint.yaml",
    "edit_url": "https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/cryptography/x509_certificate_fingerprint.yaml"
  },
  "urls": {
    "html": "http://registry.apicrafter.io/datatype/x509_certificate_fingerprint",
    "json": "http://registry.apicrafter.io/api/v1/datatypes/x509_certificate_fingerprint.json"
  }
}