Note: This reference implementation is not production quality. Use at your own risk.
SEQUENCE (8 elem)
[0] (1 elem)
INTEGER 2
INTEGER 0c 82 6f a4 74 09 9b 33 b6 a2 c5 c1 0d
SEQUENCE (1 elem)
OBJECT IDENTIFIER 1.2.840.10045.4.3.3 ECDSA coupled with SHA-384
SEQUENCE (2 elem)
SET (1 elem)
SEQUENCE (2 elem)
OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
UTF8String OpenID Key Attestation Root at http://localhost:8051
SET (1 elem)
SEQUENCE (2 elem)
OBJECT IDENTIFIER 2.5.4.6 countryName (X.520 DN component)
UTF8String US
SEQUENCE (2 elem)
UTCTime 2026-09-11T14:58:54Z
UTCTime 2027-03-10T14:58:54Z
SEQUENCE (1 elem)
SET (1 elem)
SEQUENCE (2 elem)
OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
UTF8String OpenID Key Attestation at http://localhost:8051
SEQUENCE (2 elem)
SEQUENCE (2 elem)
OBJECT IDENTIFIER 1.2.840.10045.2.1 Elliptic curve public key cryptography
OBJECT IDENTIFIER 1.2.840.10045.3.1.7 NIST Curve P-256
BIT STRING (520 bit) 0000010001010101110001001000011110000011001110100001100101011101000010010000010100011001010001110100010011000011010110001010100011100000001000110010101010011000100010111100111000011001000100010000110110110101011110101100110100011100000011101010100011111010101001111101000110100111111011111001101100001010111011100101110111010111010101011000101111000110010011001001110001001001110110111001111100010000111110111101011011100100111101110111011000001000101000111010000011110000000110000111011110011001010000111101111101110101
[3] (1 elem)
SEQUENCE (6 elem)
SEQUENCE (2 elem)
OBJECT IDENTIFIER 2.5.29.35 authorityKeyIdentifier (X.509 extension)
OCTET STRING (24 byte) 30 16 80 14 cc 7a b9 27 5d e5 f2 0e 63 ba d3 2b f9 d4 52 de e0 6f 2f 99 ("0.�.�z�']��.c��+��R��o/�")
SEQUENCE (3 elem)
OBJECT IDENTIFIER 2.5.29.15 keyUsage (X.509 extension)
BOOLEAN true
OCTET STRING (4 byte) 03 02 02 84 ("...�")
SEQUENCE (3 elem)
OBJECT IDENTIFIER 2.5.29.19 basicConstraints (X.509 extension)
BOOLEAN true
OCTET STRING (8 byte) 30 06 01 01 ff 02 01 00 ("0...�...")
SEQUENCE (2 elem)
OBJECT IDENTIFIER 2.5.29.18 issuerAltName (X.509 extension)
OCTET STRING (25 byte) 30 17 86 15 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 38 30 35 31 ("0.�.http://localhost:8051")
SEQUENCE (2 elem)
OBJECT IDENTIFIER 2.5.29.31 cRLDistributionPoints (X.509 extension)
OCTET STRING (51 byte) 30 31 30 2f a0 2d a0 2b 86 29 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 38 30 35 31 2f 63 72 6c 2f 6b 65 79 5f 61 74 74 65 73 74 61 74 69 6f 6e ("010/�-�+�)http://localhost:8051/crl/key_attestation")
SEQUENCE (2 elem)
OBJECT IDENTIFIER 2.5.29.14 subjectKeyIdentifier (X.509 extension)
OCTET STRING (22 byte) 04 14 92 4f ac 4f 64 2f 58 e3 d5 07 35 6a 28 77 35 a5 d9 7b 66 73 ("..�O�Od/X��.5j(w5��{fs")
SEQUENCE (8 elem)
[0] (1 elem)
INTEGER 2
INTEGER 11 00 51 8c 10 8a e2 4d 52 05 f8 29 28 c9 96 99
SEQUENCE (1 elem)
OBJECT IDENTIFIER 1.2.840.10045.4.3.3 ECDSA coupled with SHA-384
SEQUENCE (2 elem)
SET (1 elem)
SEQUENCE (2 elem)
OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
UTF8String OpenID Key Attestation Root at http://localhost:8051
SET (1 elem)
SEQUENCE (2 elem)
OBJECT IDENTIFIER 2.5.4.6 countryName (X.520 DN component)
UTF8String US
SEQUENCE (2 elem)
UTCTime 2026-09-11T14:58:54Z
UTCTime 2041-09-07T14:58:54Z
SEQUENCE (2 elem)
SET (1 elem)
SEQUENCE (2 elem)
OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
UTF8String OpenID Key Attestation Root at http://localhost:8051
SET (1 elem)
SEQUENCE (2 elem)
OBJECT IDENTIFIER 2.5.4.6 countryName (X.520 DN component)
UTF8String US
SEQUENCE (2 elem)
SEQUENCE (2 elem)
OBJECT IDENTIFIER 1.2.840.10045.2.1 Elliptic curve public key cryptography
OBJECT IDENTIFIER 1.3.132.0.34 EC Curve P-384
BIT STRING (776 bit) 00000100110110110001100101010000100110111000001100011100110011001111100011111010011011010011100110001000110011101000111011110010100001111111000001100100111110101110001001101011001110100011010110011001111110110100011101100101100110110001001100111110110110100010010100010001001000010110110011001011001000011000101100000111110101101110110000011000001111000000100110000101010111001101010001110001111010110111000111110110011110010011000001010111011001010000000000001110001011010001001001010101111100010011101011111001110100110000101010110111110011110101000001001010111011010100101010111000101011111110110110101101001110101111101110111100111000001010001000000011100001011000110100100001110100101010000011100101100111110100001000110000011110000011110000110111001001111001010110000100
[3] (1 elem)
SEQUENCE (6 elem)
SEQUENCE (3 elem)
OBJECT IDENTIFIER 2.5.29.15 keyUsage (X.509 extension)
BOOLEAN true
OCTET STRING (4 byte) 03 02 01 06 ("....")
SEQUENCE (3 elem)
OBJECT IDENTIFIER 2.5.29.19 basicConstraints (X.509 extension)
BOOLEAN true
OCTET STRING (8 byte) 30 06 01 01 ff 02 01 01 ("0...�...")
SEQUENCE (2 elem)
OBJECT IDENTIFIER 2.5.29.18 issuerAltName (X.509 extension)
OCTET STRING (25 byte) 30 17 86 15 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 38 30 35 31 ("0.�.http://localhost:8051")
SEQUENCE (2 elem)
OBJECT IDENTIFIER 2.5.29.31 cRLDistributionPoints (X.509 extension)
OCTET STRING (51 byte) 30 31 30 2f a0 2d a0 2b 86 29 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 38 30 35 31 2f 63 72 6c 2f 6b 65 79 5f 61 74 74 65 73 74 61 74 69 6f 6e ("010/�-�+�)http://localhost:8051/crl/key_attestation")
SEQUENCE (2 elem)
OBJECT IDENTIFIER 2.5.29.14 subjectKeyIdentifier (X.509 extension)
OCTET STRING (22 byte) 04 14 cc 7a b9 27 5d e5 f2 0e 63 ba d3 2b f9 d4 52 de e0 6f 2f 99 ("..�z�']��.c��+��R��o/�")
SEQUENCE (2 elem)
OBJECT IDENTIFIER 2.5.29.35 authorityKeyIdentifier (X.509 extension)
OCTET STRING (24 byte) 30 16 80 14 cc 7a b9 27 5d e5 f2 0e 63 ba d3 2b f9 d4 52 de e0 6f 2f 99 ("0.�.�z�']��.c��+��R��o/�")