47 lines
2.2 KiB
Plaintext
47 lines
2.2 KiB
Plaintext
PHASE 7 CERTIFICATE INVENTORY
|
|
Captured/verified: 2026-08-26
|
|
Device build: TPM191E_R.211.000.103.000
|
|
|
|
CERTIFICATE 1: APK PLATFORM SIGNER
|
|
Used by: framework-res.apk, Channels, GEL, TPTvService, EUM, Settings,
|
|
OAD, btota, USBService, SettingsProxy (and many other OEM apps)
|
|
PackageManager signer ID: [476d2253]
|
|
PackageManager signing version: 3
|
|
Subject: EMAILADDRESS=android@android.com, CN=Android, OU=Android,
|
|
O=Android, L=Mountain View, ST=California, C=US
|
|
Issuer: EMAILADDRESS=android@android.com, CN=Android, OU=Android,
|
|
O=Android, L=Mountain View, ST=California, C=US
|
|
Serial: 9e71a5645c4fc22f
|
|
SHA-256: D8:FF:E0:AF:40:4E:AB:8E:45:5A:00:74:D4:17:B0:DA:12:D0:67:26:E5:05:B0:2B:7F:DB:18:31:29:C8:90:68
|
|
SHA-1: 43:80:01:76:AC:53:BF:E9:FD:33:4A:EB:86:1D:40:A1:2A:00:AF:C0
|
|
Public key: RSA 2048 bit
|
|
Certificate signature: SHA1withRSA
|
|
Validity: 2015-08-10 05:01:32 CEST to 2042-12-26 04:01:32 CET
|
|
Schemes observed: v1/JAR + APK Signing Block v2 + v3
|
|
v4: no adjacent .idsig observed; not proven
|
|
Private key: NOT PRESENT / NOT SEARCHED
|
|
|
|
CERTIFICATE 2: OTA/RECOVERY RELEASE CERTIFICATE
|
|
Source: /system/etc/security/otacerts.zip!/releasekey.x509.pem
|
|
otacerts.zip SHA-256: cc26a1d15440b2990ccc465c3d6c3c800225fc88a23083724753ee1f3de5ec3c
|
|
PEM file SHA-256: E20C85B3CE3B2E8B757C4C261C1F3595C6F7914332744F84C709494D9609E64A
|
|
Subject: EMAILADDRESS=android@android.com, CN=Android, OU=Android,
|
|
O=Android, L=Mountain View, ST=California, C=US
|
|
Issuer: EMAILADDRESS=android@android.com, CN=Android, OU=Android,
|
|
O=Android, L=Mountain View, ST=California, C=US
|
|
Serial: dd7b52f76828c966
|
|
SHA-256: E0:18:AB:2F:96:83:8E:B4:B7:B9:1A:D1:12:0B:C6:74:90:F7:E1:01:0F:D4:0C:1A:E5:1E:C4:F8:B1:2A:A0:F8
|
|
SHA-1: 98:B1:DF:C5:2D:99:28:B2:2A:51:93:AB:10:86:7A:37:85:A4:1B:C0
|
|
Public key: RSA 2048 bit
|
|
Certificate signature: SHA1withRSA
|
|
Validity: 2015-08-10 05:00:59 CEST to 2042-12-26 04:00:59 CET
|
|
Private key: NOT PRESENT / NOT SEARCHED
|
|
|
|
CONCLUSION
|
|
The two certificates are cryptographically different despite the same textual
|
|
distinguished name. The OTA public certificate cannot sign PackageManager APK
|
|
updates. Possession of the APK public certificate cannot create accepted APKs.
|
|
No AVB public-key descriptor was readable, so neither certificate is asserted
|
|
to be the AVB key.
|
|
|