cmdref.net - Cheat Sheet and Example

cmdref.net is command references/cheat sheets/examples for system engineers.

User Tools

Site Tools


Sidebar








Cloud



Etc


Reference














.

protocol:openssl:chain.html



How to Check the SSL Certificate Chain from the outside with openssl command

google.com

# openssl s_client -connect google.com:443 -showcerts < /dev/null 2>&1 | grep '[si]:'
 0 s:/C=US/ST=California/L=Mountain View/O=Google Inc/CN=*.google.com
   i:/C=US/O=Google Inc/CN=Google Internet Authority G2
 1 s:/C=US/O=Google Inc/CN=Google Internet Authority G2
   i:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
 2 s:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
   i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority
# 


amazon.com

# openssl s_client -connect www.amazon.com:443 -showcerts < /dev/null 2>&1 | grep '[si]:'
 0 s:/C=US/ST=Washington/L=Seattle/O=Amazon.com, Inc./CN=www.amazon.com
   i:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4
 1 s:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4
   i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5


www.uniqlo.com

# openssl s_client -connect www.uniqlo.com:443 -showcerts < /dev/null 2>&1 | grep '[si]:'
 0 s:/C=JP/ST=Tokyo/L=Minato-ku/O=FAST RETAILING CO., LTD./OU=Digital Business Transformation Services/CN=www.uniqlo.com
   i:/C=US/O=GeoTrust Inc./CN=GeoTrust SSL CA - G3
 1 s:/C=US/O=GeoTrust Inc./CN=GeoTrust SSL CA - G3
   i:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
#


www.globalsign.com

# openssl s_client -connect www.globalsign.com:443 -showcerts < /dev/null 2>&1 | grep '[si]:'
 0 s:/businessCategory=Private Organization/serialNumber=578611/1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=New Hampshire/C=US/ST
=New Hampshire/L=Portsmouth/street=Two International Drive/O=GMO GlobalSign Inc/CN=www.globalsign.com
   i:/C=BE/O=GlobalSign nv-sa/CN=GlobalSign Extended Validation CA - SHA256 - G2
 1 s:/C=BE/O=GlobalSign nv-sa/CN=GlobalSign Extended Validation CA - SHA256 - G2
   i:/OU=GlobalSign Root CA - R2/O=GlobalSign/CN=GlobalSign
#








OpenSSL - How to use OpenSSL from the outside




protocol/openssl/chain.html.txt ยท Last modified: 2021/08/18 by admin

Page Tools