Yubikey
YubicoBitwardenGPG ToolsDonate Coffee
General
General
  • Introduction
    • Getting Started
    • Terms
    • FAQ
    • NFC vs FIPS
    • Securing Your Footprint
  • Tutorials
    • ⭕Bitwarden
    • ⭕Bitlocker
    • ⭕Code Signing
    • ⭕EFS
    • ⭕Github Desktop
    • ⭕KeePassXC
    • ⭕SSH + PuTTY-CAC
      • 🟣PIV-PKCS
      • 🟣PIV-CAPI
      • 🟣GPG
      • ⭕Configs
        • 📄gpg.conf
        • 📄gpg-agent.conf
        • 📄scdaemon.conf
    • ⭕Battle.net OTP
    • ⭕Steam OTP
    • ⭕Veracrypt
  • GUIDES
    • ⭕Setting up a New Key
      • 🟣Minimal Version
    • ⭕Securing Your Credentials
    • ⭕Setting up CLI / ykman
    • ⭕Setting up CLI / GPG
    • ⭕Mysterious Certificates
    • ⭕Understanding PINs
      • 🟣FIDO2
      • 🟣GPG
      • 🟣PIV
    • ⭕Yubikey Firmware
  • CHEATSHEETS
    • ⭕Environment Variables
    • ⭕Files/Abbreviations
    • ⭕OpenSSL
      • 🟣slot_9a.cnf
      • 🟣slot_9c.cnf
      • 🟣slot_9d.cnf
      • 🟣slot_9e.cnf
    • ⭕PEM Types
    • ⭕Usage Types
      • 🟣KeyUsage
      • 🟣KeyUsageProperty
      • 🟣extendedKeyUsage
      • 🟣KeyProtection
      • 🟣KeySpec
Powered by GitBook
On this page

Was this helpful?

  1. CHEATSHEETS

PEM Types

Provides a list of PEM types for reference.

If you are unsure what PEM type is used on a key or certificate, you can open the .PEM file and review the header text. Each PEM header has different text which can be matched with the list below in order to identify what was used to create that PEM file.

Matched with the list below, this certificate is PEM_STRING_X509

-----BEGIN CERTIFICATE-----
GRHFtDDCB2ygAwIBAgIUIiJFcijmTzMoQwlZVH4AcFrcUuwwDQYJKoZIhvcNAQEL

Matched with the list below, this certificate is PEM_STRING_PKCS8

-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIFLTBXBgkqhkiG9w0BBQ0wSjApBgkqhkiG9w0BBQwwHAQIYtPtoLIdOWwCAggA

PEM_STRING_X509_OLD

"X509 CERTIFICATE"

PEM_STRING_X509

"CERTIFICATE"

PEM_STRING_X509_PAIR

"CERTIFICATE PAIR"

PEM_STRING_X509_TRUSTED

"TRUSTED CERTIFICATE"

PEM_STRING_X509_REQ_OLD

"NEW CERTIFICATE REQUEST"

PEM_STRING_X509_REQ

"CERTIFICATE REQUEST"

PEM_STRING_X509_CRL

"X509 CRL"

PEM_STRING_EVP_PKEY

"ANY PRIVATE KEY"

PEM_STRING_PUBLIC

"PUBLIC KEY"

PEM_STRING_RSA

"RSA PRIVATE KEY"

PEM_STRING_RSA_PUBLIC

"RSA PUBLIC KEY"

PEM_STRING_DSA

"DSA PRIVATE KEY"

PEM_STRING_DSA_PUBLIC

"DSA PUBLIC KEY"

PEM_STRING_PKCS7

"PKCS7"

PEM_STRING_PKCS7_SIGNED

"PKCS #7 SIGNED DATA"

PEM_STRING_PKCS8

"ENCRYPTED PRIVATE KEY"

PEM_STRING_PKCS8INF

"PRIVATE KEY"

PEM_STRING_DHPARAMS

"DH PARAMETERS"

PEM_STRING_DHXPARAMS

"X9.42 DH PARAMETERS"

PEM_STRING_SSL_SESSION

"SSL SESSION PARAMETERS"

PEM_STRING_DSAPARAMS

"DSA PARAMETERS"

PEM_STRING_ECDSA_PUBLIC

"ECDSA PUBLIC KEY"

PEM_STRING_ECPARAMETERS

"EC PARAMETERS"

PEM_STRING_ECPRIVATEKEY

"EC PRIVATE KEY"

PEM_STRING_PARAMETERS

"PARAMETERS"

PEM_STRING_CMS

"CMS"

❊ Notes

PKCS#8 only used for PRIVATE KEYS

Previousslot_9e.cnfNextUsage Types

Last updated 2 years ago

Was this helpful?

⭕