获取证书

获得证书信息

KeyStore ks =KeyStore.getInstance("BKS")

InputStream in = new FileInputStream(System.getProperty("javax.net.ssl.trustStore","/etc/security/cacerts.bks"));

ks.load(in,null);

for (String alias : Collections.list(ks.aliases())){

Certificate c = ks.getCertificate(alias);

X509Certificate cert = (X509Certificate) c;

}

CertificateFactory最常用的使用方式如下：

CertificateFactory cf=CertificateFactory.getInstance("X.509");

FileInputStream in=new FileInputStream("out.csr");        /*其中out.csr是证书文件*/

X509Certificate t=cf.generateCertificate(in);

System.out.println("输出证书信息:\n"+t.toString());

System.out.println("版本号:"+t.getVersion());

System.out.println("序列号:"+t.getSerialNumber().toString(16));

System.out.println("主体名："+t.getSubjectDN());

System.out.println("签发者："+t.getIssuerDN());

System.out.println("有效期："+t.getNotBefore());

System.out.println("签名算法："+t.getSigAlgName());