OS4X Core - list of support certificate formats

Background

For handling X509v3 certificates and keys, several format exist. In general, file suffix names (such as ".cer", ".der", ".pem" or others) are only a hint of what format is included in the file, but this does not neccessarily mean that the format is really represendeted in the file itself. So, when dealing with several file formats, you will have to determine which certificate format is really included in the file.

This is a list of supported certificate formats with which OS4X can deal:

X509v3 PEM encoded certificate =

Suffixes known =

• .cer
• .cert
• .pem

Description

This format is an ASCII, textual representation of a BASE64 encoded certificate format. The content is readable in a text editor. The file has a header and footer line:

-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

Support in OS4X

This file format is the main format used in OS4X, used in several places:

• TLS server and client certificate
• trusted certificates
• partner certificates (used for en-/decryption and signature [verification] processes)