https://wiki.apoyar.eu/index.php?action=history&feed=atom&title=Commercial_SSL_Certificate_Chain_Checks 2026-07-20T13:45:03Z Revision history for this page on the wiki MediaWiki 1.41.0 https://wiki.apoyar.eu/index.php?title=Commercial_SSL_Certificate_Chain_Checks&diff=272&oldid=prev 2023-06-29T12:28:52Z

<p>Created page with &quot;SSL Certificate chain checks ---------------------------- - Once we got certificate from the client, if multiple .crt files.. combine them into a single certificate and if its single certificate just keep as it is - then we can check the certificate content with following command openssl x509 -in certificate.crt -text -noout - then depending on certificate authority we need to downlaod and add intermediate certificates - downloaded intermediate certificates should...&quot;</p> <p><b>New page</b></p><div>SSL Certificate chain checks<br /> ----------------------------<br /> <br /> - Once we got certificate from the client, if multiple .crt files.. combine them into a single certificate and if its single certificate just keep as it is<br /> <br /> <br /> - then we can check the certificate content with following command <br /> <br /> openssl x509 -in certificate.crt -text -noout<br /> <br /> <br /> - then depending on certificate authority we need to downlaod and add intermediate certificates<br /> - downloaded intermediate certificates should be valid more than year, as of our generated certificate<br /> <br /> <br /> - to combine our generated certificate and intermediate_bundle certificate into a single cerrtificate use below command (with appropriate names)<br /> <br /> cat generated.crt intermediate_bundle.crt &gt; resulting.crt<br /> <br /> <br /> - Once its ready we can check details of certificate with below command (with resulting certificate name)<br /> <br /> cat apoyar_2024.crt | awk -v cmd=&quot;openssl x509 -subject -issuer -noout&quot; &#039;/-----BEGIN/ { c = $0; next } c { c = c &quot;\n&quot; $0 } /-----END/ { print c|cmd; close(cmd); c = 0 }&#039;<br /> <br /> <br /> - Then, once we apply it on website, we can check the chain of certificate authorities at below site weather its broken or not.<br /> <br /> https://www.sslshopper.com/ssl-checker.html</div>

Admin