Cheatsheet OpenSSL

• Date: 2021-04-17

• show certificate $ openssl x509 -text -in Server.pem
• print pkcs7 certificate content (mail signature)

openssl pkcs7 -in smime.p7s -inform DER -print_certs`
openssl s_client -connect 172.16.0.129:443 2>&1 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p'
openssl x509 -text -in servercert.pem

• When does the certificate expire? openssl x509 -noout -in /etc/ssl/server.crt -dates

• Who has issued the certificate? openssl x509 -noout -in /etc/ssl/server.crt -issuer

• Issued to? $ openssl x509 -noout -in /etc/ssl/server.crt -subject

• Certificate fingerprint openssl x509 -noout -in /etc/ssl/server.crt -fingerprint

• Show ertificate hash

$ openssl x509 -noout -in /etc/ssl/server.crt -hash
$ openssl verify /etc/ssl/server.crt

• Create a hash over a file openssl dgst -sha1 file.txt
• Show crl list contents openssl crl -in examplecrl.crl -text -noout