Listing4: Mit Hilfe von PrettyPrintCrl lässt sich die CRL direkt aus der Datenbank des Dogtag-Servers abfragen. [root@tiffy ~]# PrettyPrintCrl /tmp/crl.txt Certificate Revocation List: Data: Version: v2 Signature Algorithm: SHA1withRSA - 1.2.840.113549.1.1.5 Issuer: CN=Certificate Authority,O=Tuxgeek Domain This Update: Thursday, November 13, 2008 1:46:26 PM CET Europe/Berlin Next Update: Thursday, November 13, 2008 5:46:26 PM CET Europe/Berlin Revoked Certificates: Serial Number: 0x9 Revocation Date: Wednesday, November 12, 2008 4:06:54 PM CET Europe/Berlin Extensions: Identifier: Revocation Reason - 2.5.29.21 Critical: no Reason: Key_Compromise Extensions: Identifier: CRL Number - 2.5.29.20 Critical: no Number: 12 Signature: Algorithm: SHA1withRSA - 1.2.840.113549.1.1.5 Signature: 1E:97:52:23:1F:ED:9B:7B:B4:00:BA:A1:6C:A2:70:74: 35:54:B3:15:7F:4D:A0:11:B4:9F:57:B6:1C:39:FC:46: E5:3D:3A:E7:80:D2:E6:37:58:95:A5:D0:51:3B:63:6B: D2:F1:5F:2D:DA:86:C0:34:E9:96:2D:F9:8D:49:8A:E2: 63:B2:0F:9B:E2:56:FD:5D:BF:D4:E6:13:01:9A:09:4D: AA:DD:24:1C:79:17:07:02:58:80:26:FF:F6:A2:5D:BC: 46:BD:7F:0E:4F:B9:2E:D8:29:A6:95:B1:89:AD:92:99: BB:7C:20:8F:D9:64:FB:2A:D6:4C:32:D8:49:8E:59:1F: 55:F3:3E:34:5A:87:5E:11:BD:C7:51:0C:E9:65:E7:CA: 8D:EF:28:B4:7D:71:49:7D:DE:1B:BA:E8:6E:57:15:84: 53:FF:0A:79:47:19:F5:03:10:1D:6C:08:6B:EF:F5:54: 24:2D:04:2A:8D:0A:06:2A:FC:F6:1C:CB:3A:2E:23:AF: D5:59:91:7E:35:F3:95:B9:6B:1C:1C:C7:4A:67:AC:96: 2B:86:68:29:99:09:A1:E0:F7:55:9E:12:27:35:AB:BC: 49:7C:E9:F0:D6:FF:95:82:97:E2:74:45:78:82:6F:93: CB:92:18:20:27:2F:10:19:4D:EE:4C:23:2D:B5:F4:E8