title: Generate sha256-Value for use in CertificateTransparencyEnforcementDisabledForLegacyCas
body: <p>Since Chrome 68 <a href="https://groups.google.com/a/chromium.org/forum/#!msg/ct-policy/Qqr59r6yn1A/2t0bWblZBgAJ" rel="nofollow noreferrer">certificate transparency is enforced</a>. That's a big problem with the SSL-decryption of our corporate proxy.</p>
  
  <p>The proxy's certificate is added to the system's certificate store, this worked like a charm until Chrome 68.
  There's a policy called <a href="http://www.chromium.org/administrators/policy-list-3#CertificateTransparencyEnforcementDisabledForLegacyCas" rel="nofollow noreferrer">CertificateTransparencyEnforcementDisabledForLegacyCas</a> that gives one the possibility to add such a certificate and disable the enforcement for it. Unfortunately I have no clue how to generate the mentioned hash:</p>
  
  <blockquote>
    <p>A subjectPublicKeyInfo hash is specified by concatenating the hash algorithm name, the "/" character, and the Base64 encoding of that hash algorithm applied to the DER-encoded subjectPublicKeyInfo of the specified certificate. This Base64 encoding is the same format as an SPKI Fingerprint, as defined in RFC 7469, Section 2.4. Unrecognized hash algorithms are ignored. The only supported hash algorithm at this time is "sha256".</p>
  </blockquote>
  
  <p>Googling didn't help and I would be glad if anyone that had the same problem could help me out.</p>
  
  <p>Thank you very much!</p>
  
  <p>Sven</p>