diff --git a/apps/sdlan/priv/public_key_sha256.sh b/apps/sdlan/priv/public_key_sha256.sh
new file mode 100644
index 0000000..6314708
--- /dev/null
+++ b/apps/sdlan/priv/public_key_sha256.sh
@@ -0,0 +1,5 @@
+# 提取公钥 -> 转换为 RSA 原始格式 (PKCS#1) -> 转为 DER 二进制 -> 计算哈希
+openssl x509 -in cert.pem -pubkey -noout | \
+openssl rsa -pubin -RSAPublicKey_out -outform DER | \
+openssl dgst -sha256 -binary | \
+base64
\ No newline at end of file