Working with Certificates

Use the commands provided in this section to work with and troubleshoot any certificate-related issues.

• Verify the certificate and view the certificate information.

  openssl verify -verbose -CAfile cacert.pem server.crt
  

• Check a certificate and view information about the certificate, such as signing authority, expiration date, and other certificate-related information.

  openssl x509 -in server.crt -text -noout
  

• Check the SSL key and verify the key for consistency.

  openssl rsa -in server.key -check
  

• Verify the CSR and view the CSR data that was entered when generating the certificate.

  openssl req -text -noout -verify -in server.csr
  

• Verify that the certificate and corresponding key matches by displaying the md5 checksums of the certificate and key. The checksums can then be compared to verify that the certificate and key match.

  openssl x509 -noout -modulus -in server.crt| openssl md5
  openssl rsa -noout -modulus -in server.key| openssl md5