Download Certificate With OpenSSL

The aim of this how-to-guide 🏁 is to help to download a TLS certificate with OpenSSL, which I need to attach to a ticket at times.

1. steps/?

• added a download switch for scenarios I need to dump this out into the download folder as well

2. on x509 -text

• x509 is a standard defining the format of public key certificates originally from 1988, assuming a strict hierarchical system of certificate authorities (CAs) for issuing the certificates
• this differes from web of trusts like PGP where anyone (not just special CAs) may sign and thus attest to the validy of others key certificates

The x509 command is a multi purpose certificate utility. It can be used to display certificate information, convert certificates to various forms, sign certificate requests like a “mini CA” or edit certificate trust settings.

— from /docs/man1.0.2/man1/x509.html

• the text switch

prints out the certificate in text form. Full details are output including the public key, signature algorithms, issuer and subject names, serial number any extensions present and any trust settings.

3. sources

• kb/Fix-OpenSSL-error-unable-to-get-local-issuer-certificate.md at master · pkutaj/kb
• linux — Using openssl to get the certificate from a server — Stack Overflow
• OpenSSL — /docs/man1.0.2/man1/x509.html
• X.509 — Wikipedia

Originally published at https://github.com.