For example in the below : echo "" | openssl s_client -CAfile ./mozilla-root.crt -showcerts -connect ssl.com:443 | openssl x509 -text
will only show the issuer/dates/etc information for the first certificate ssl.com and not for the subsequent certificates in the chain. Regards Will only show the info On Sun, Nov 11, 2012 at 8:15 PM, Ali Jawad <alijaw...@gmail.com> wrote: > Hi Florian > Thank you for the response, the problem for me is that openssl > s_client -showcerts only shows two certificates while the actual > number of chain entries is 3, this is what is confusing me. > Regards > > On Sun, Nov 11, 2012 at 7:16 PM, Florian Weimer <f...@deneb.enyo.de> wrote: >> * Ali Jawad: >> >>> When I do visit a website using a browser and check the certificate I >>> can see the intermediate certificates and the info of those >>> certificates. >>> >>> I am wondering how can I see that info using command line, i know how >>> to display the certificate info and it shows the info of the >>> intermediate certificates such as issuer name and subject name, but >>> how exactly can I get the info of that intermediate certificate to >>> check expiry date and other information. >> >> You can use the PEM-encoded certificates printed by "openssl s_client >> -showcerts" as input to "openssl x509 -noout -text". >> ______________________________________________________________________ >> OpenSSL Project http://www.openssl.org >> User Support Mailing List openssl-users@openssl.org >> Automated List Manager majord...@openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
