KEYS AND CERTIFICATES

xformulas.net.crt xformulas.net CERTIFICATE [1] signed by ERG2332

ERG2332.crt ERG2332 CERTIFICATE (self-signed, CA certificate of xformulas.net)

ERG2332.crt_signed.csig CAdES SIGNATURE of ERG2332.crt (containing ERG2332.crt) done by WEBMASTER [2]

erg2332_FNMT-RCM.pdf Receipt signed by "FNMT-RCM" generated in https://valide.redsara.es/ with "Validate Signature" of ERG2332.crt_signed.csig

erg45098391.cer WEBMASTER CERTIFICATE [3] signed by "AC DNIE 004" ([4])

AC004.crt "AC DNIE 004" CERTIFICATE signed by "AC RAIZ DNIE 2" ([4]) and downloaded on 15-jun-2019 from http://pki.policia.es/dnie/certs/AC004.crt

ACRAIZ-DNIE2.zip "AC RAIZ DNIE 2" ([4]) CERTIFICATE (self-signed, CA certificate) downloaded on 15-jun-2019 from https://www.dnielectronico.es/ZIP/ACRAIZ-DNIE2.zip

XFORMULAS_NET_KEYS_20190615.zip ALL the previous files compressed in a single file
XFORMULAS_NET_KEYS_20190615.zip_SIGNATURESIGNATURE of XFORMULAS_NET_KEYS_20190615.zip done by xformulas.net

[1] It will be used to verify the apps generated and signed by xformulas.net (it is NOT the SSL certificate of xformulas.net)
[2] WEBMASTER is the Subject CN of erg45098391.cer
[3] Certificate "FIRMA" of WEBMASTER DNIE without private key
[4] "DIRECCION GENERAL DE LA POLICIA"


Verify xformulas.net.crt

openssl verify -CAfile ERG2332.crt xformulas.net.crt


Verify ERG2332.crt Click "Validate Signature" in https://valide.redsara.es/, select ERG2332.crt_signed.csig and click "Validate".
The "Validation result" must be "Correct Signature" and the "Signatories:" must be WEBMASTER.
Click "Download file" to get <documento.txt> that must be equal to ERG2332.crt.

cmp ERG2332.crt <documento.txt>

Also you can click "Download receipt" to get another file, equal or similar to erg2332_FNMT-RCM.pdf.

Verify erg45098391.cer

openssl x509 -inform DER -in AC004.crt -outform PEM -out AC004_pem.crt

unzip ACRAIZ-DNIE2.zip

openssl verify -CAfile "AC RAIZ DNIE 2.crt" -untrusted AC004_pem.crt erg45098391.cer


Verify XFORMULAS_NET_KEYS_20190615.zip

openssl x509 -pubkey -noout -in xformulas.net.crt > xformulas.net_PUBLIC.key

openssl dgst -sha256 -verify xformulas.net_PUBLIC.key -signature XFORMULAS_NET_KEYS_20190615.zip_SIGNATURE XFORMULAS_NET_KEYS_20190615.zip



Updated on July 15, 2019
main index
recreational index