X.509 certificate (Base64 DER without PEM lines)
ID x509_certificate_base64
Pattern of x509_certificateNot PIIDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
X.509 v3 certificate as the Base64 of its DER encoding on one line, without the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines of PEM. Registries, databases and APIs often store certificates this way. The regexp follows the DER structure: a SEQUENCE with a two-byte length (MII), the tbsCertificate SEQUENCE (CC) and the version field v3 (gAwIBAgI). Certificates of version 1, which have no version field, and certificates over 16 KB are not covered.
- Pattern of
- X.509 certificate (PEM)
x509_certificate - Categories
- Cryptographic identifiers
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 73/100 · missing: second example, mapping (Wikidata, Schema.org, ...), detector coverage
- Metacrafter rules
- no detection rule yet
- Supported by tools
- no tool record lists this type yet
Regular expression
^MII[A-Za-z0-9+/]{2}[DTjz]CC[A-Za-z0-9+/]{3}gAwIBAgI[A-Za-z0-9+/]+={0,2}$Python re syntax.
Examples
| Value | Description |
|---|---|
| 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 | Body of the example certificate of RFC 7468, section 5.1, on one line |
| MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEn1LlwLN/KBYQRVH6HfIMTzfEqJOVztLekLchp2hi78cCaMY81FBlYs8J9l7krc+M4aBeCGYFjba+hiXttJWPL7ydlE+5UG4UNkn3Eos8EiZByi9DVsyfy9eejh+8AXgp invalid | Base64 of a public key (SubjectPublicKeyInfo), not of a certificate |
Translations
| Language | Name | Description |
|---|---|---|
| Russian | Сертификат X.509 в Base64 без PEM-заголовков | Сертификат X.509 v3 в кодировке DER, записанный в Base64 одной строкой, без строк -----BEGIN CERTIFICATE----- и -----END CERTIFICATE-----. Так сертификаты хранят реестры, базы данных и API. |
Sources
- doc: https://www.rfc-editor.org/rfc/rfc5280#section-4.1
- doc: https://www.rfc-editor.org/rfc/rfc7468#section-5
Use this record
- Page URL:
https://registry.apicrafter.io/datatype/x509_certificate_base64 - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/cryptography/x509_certificate_base64.yamlon GitHub