PKI Certificate in Base64 Format

PKI Certificate Tutorials - Herong's Tutorial Examples

∟PKI Certificate in Base64 Format

This section describes the Base64 file format to store PKI certificates.

One issue with the DER file format is that it is a binary file, not safe to be transmitted directly, or copied and pasted in document editors.

So PKI certificate DER files can be encoded into text files using the Base64 encoding. Here is the same certificate from the previous tutorial stored in Base64 format:
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Here is what we should know about a certificate file in Base64 format.

It is a text file with printable characters only. So it is safe to be transmitted directly.
It can store only one certificate.
It has no password protection.
It may have a file extension of .b64.
Its first 3 characters are always "MII", which are encoded from the first 18 bits in the DER file: 0b001100001000001000.
It can be converted back to the DER format using Base64 decoding tools, like "base64 --decode" command.