Character encoding is hard I guess
[nortti@heinä ephemeral.EmlLr9ILvM]$ openssl req -new -x509 -newkey rsa:2048 -subj '/CN=heinän PK-avain/' -keyout PK.key -out PK.crt -days $((20*365)) -noenc -sha256
..+...+......+.........+............+..+.+..+..........+..+++++++++++++++++++++++++++++++++++++++*...+........+.......+............+.....+...+++++++++++++++++++++++++++++++++++++++*.+....+.........+......+...+..+..........+.....+....+............+..+...+...+.+...+..+.............+.....+...+....+........+.+.....+.++++++
...+..+.........+.+...+..+.+...+............+............+++++++++++++++++++++++++++++++++++++++*.............+.+...+...+..+++++++++++++++++++++++++++++++++++++++*....+...+......+.....+....+...+..............+..........+.....+.+.....+.........+.+..+...+.........+.............+.....+..........+..+......+...+.+...............+...+.....+......+.+........+......+.......+.......................+.......+..+..........+..+.........+.+........+.+..+....+.....+.+...+.....+..........+.....+.......+..+...+.........+................+..+...+.......+.....+...+...+.+......+...+......+......+..+.............+.........+.....+......+.........+....+.........+...+............+.....+...+...+.......+...+.....+....+...........+.......+............+..+.........+....+...+.....+...+....+...............+...........+.........+...+....+.....+.+...+............+..+.+..+...+.+........+...+....+......+..............+..................+...+............+......+..........+............+..+.+...........+.+.........+.........+.....+..........+...........+...+.+.....................+...+.....+.+.....+......+.+..+...+...+....+...+.....+.........+....+.....+......+..................+.+..+...+.......+..+.......+..............+.......+.....+.......+...........+.+.........+..+...+............+.......+............+......+..+...+...+....+............+.........+......++++++
-----
[nortti@heinä ephemeral.EmlLr9ILvM]$ openssl x509 -in PK.crt -noout -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:1d:b4:47:d8:22:73:3d:b2:89:e1:9b:e6:aa:4d:98:b1:b1:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=heinän PK-avain
Validity
Not Before: Aug 10 18:56:22 2026 GMT
Not After : Aug 5 18:56:22 2046 GMT
Subject: CN=heinän PK-avain
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b9:e5:f2:0e:92:2a:83:61:37:b4:d7:27:53:b0:
16:e5:97:cb:66:53:5b:23:9e:75:58:5f:d7:82:60:
96:b3:51:76:c1:81:f8:f4:52:28:24:a5:2f:05:64:
55:f4:61:b6:c9:86:fe:46:a6:cd:97:f6:32:f7:fb:
5c:e3:44:c1:8d:82:75:bf:35:26:ac:85:19:05:0a:
09:b8:81:0f:0b:96:85:ff:94:bb:e0:ae:46:ec:82:
d5:e8:e9:5b:b9:54:c4:fe:ac:2a:b3:f7:c2:b9:8d:
04:6b:9d:22:f8:0b:b2:49:af:ce:95:87:38:ea:5e:
74:b8:1b:49:6e:33:39:44:90:e4:ee:f7:dd:80:ac:
40:c0:b4:22:09:7a:99:80:f0:04:06:78:7f:09:a9:
32:44:14:64:ab:3c:3a:44:25:a3:16:1a:44:0d:4c:
cb:85:b7:e1:b0:88:43:7e:8c:13:94:43:b7:fb:01:
1c:95:54:14:83:ef:73:fc:06:3c:b1:76:75:26:e6:
a6:03:72:43:47:94:24:6e:6c:f7:c0:8b:94:23:15:
95:0e:a4:dc:fa:71:7e:4c:36:a4:aa:2e:e4:64:69:
5a:75:b4:ab:4a:e7:4e:87:97:5a:a2:fd:df:11:2b:
96:4b:87:c1:37:0a:26:27:23:63:c3:d1:98:b3:aa:
5b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CC:76:B4:AD:E4:41:64:30:E0:A7:4D:60:3C:32:A1:7B:5F:31:5B
X509v3 Authority Key Identifier:
40:CC:76:B4:AD:E4:41:64:30:E0:A7:4D:60:3C:32:A1:7B:5F:31:5B
X509v3 Basic Constraints: critical
CA:TRUE
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
40:ef:47:52:b9:fc:2e:97:d1:d4:93:03:8a:08:46:e5:51:9f:
65:f1:be:a7:f2:07:8c:c1:54:30:a8:fa:66:5a:35:31:d1:b3:
12:b9:10:e1:55:2e:4e:19:23:c4:28:c1:f4:5a:29:df:be:94:
99:67:9c:de:02:7b:15:95:79:6d:c4:67:fb:49:cf:0c:54:68:
e4:a6:d7:07:05:ea:3a:1c:16:81:3b:d8:6b:c8:bb:f7:ad:41:
af:a4:3a:0e:ca:18:6c:69:b3:91:22:87:e6:92:1c:3a:6e:50:
e1:d6:7f:16:3a:55:e8:fb:84:2d:de:f3:95:40:28:51:38:5a:
c2:75:87:e7:83:ae:39:96:65:83:44:f0:b4:bd:b4:9e:8e:e6:
0b:5e:b9:16:ae:0d:52:29:3c:9f:02:bb:56:ed:3c:75:eb:18:
55:13:bf:2d:5d:a7:82:ea:18:6d:a7:c8:fe:dd:72:d1:14:7d:
79:16:e9:e9:26:2b:3d:89:fb:e5:4d:eb:f0:77:b6:07:c6:74:
23:b7:33:22:26:3b:80:37:39:7c:84:5a:a0:9a:95:59:a7:5b:
ef:6e:e9:ae:7e:9f:33:06:ec:04:f0:c1:47:5f:f8:e2:1b:0d:
66:3b:0d:3d:20:63:7a:e5:49:d4:79:e6:46:6e:66:68:d1:98:
73:62:70:92
[nortti@heinä ephemeral.EmlLr9ILvM]$ openssl asn1parse -in PK.crt | rg hein
61:d=5 hl=2 l= 18 prim: UTF8STRING :heinän PK-avain
124:d=5 hl=2 l= 18 prim: UTF8STRING :heinän PK-avain
[nortti@heinä ephemeral.EmlLr9ILvM]$ tail -n +2 PK.crt | head -n -1 | base64 -d | rg -ao 'hein.*vain' | hexdump -C
00000000 68 65 69 6e c3 83 c2 a4 6e 20 50 4b 2d 61 76 61 |hein....n PK-ava|
00000010 69 6e 30 1e 17 0d 32 36 30 38 31 30 31 38 35 36 |in0...2608101856|
00000020 32 32 5a 17 0d 34 36 30 38 30 35 31 38 35 36 32 |22Z..46080518562|
00000030 32 5a 30 1d 31 1b 30 19 06 03 55 04 03 0c 12 68 |2Z0.1.0...U....h|
00000040 65 69 6e c3 83 c2 a4 6e 20 50 4b 2d 61 76 61 69 |ein....n PK-avai|
00000050 6e 0a |n.|
00000052