PKI

Public certificates and trust material used to verify software and releases published by me.

root
└── issuing
    └── coalaura

Root

Trust anchor for this PKI.

• root.pem — certificate, PEM
• root.cer — certificate
• root.pub.pem — public key, PEM
• root.spki.der — SubjectPublicKeyInfo, DER

Issuing CA

Intermediate CA signed by the root.

• issuing.pem — certificate, PEM
• issuing.cer — certificate

Code Signing

Certificate used to sign software and release artifacts.

• coalaura.pem — certificate, PEM
• coalaura.cer — certificate
• coalaura-chain.pem — certificate chain, PEM

Fingerprints

View SHA-256 fingerprints.

Verification

Verify the signing certificate against the chain:

openssl verify -CAfile root.pem -untrusted issuing.pem coalaura.pem

Inspect the signing certificate and its SHA-256 fingerprint:

openssl x509 -in coalaura.pem -noout -subject -issuer -serial -dates -fingerprint -sha256