certificate pinning.txt

Adding/Replacing the PublicKey in mobile application (FingerPrint):

Generating SHA256 hash from the Burp cert:

// It generates Publickey from the Burp Certificate

$ openssl x509 -inform der -in burp_CA.der -pubkey -noout -out burp.pub


// It converts burp publickey to base64 encoded format

$ openssl rsa -pubin -in burp.pub -outform der | openssl dgst -sha256 -binary | openssl enc -base64

Output:

// This hash value used to PATCH the application to bypass SSL Pinning

writing RSA key
r6FuyJwcyPM1h44d2lvO56f/+WmH2EKQ2h7rJAgNF5U=