Check live TLS cert openssl
Show expiry and issuer of a live TLS certificate
echo | openssl s_client -connect example.com:443 -servername example.com 2>/dev/null | openssl x509 -noout -dates -subject -issuer
more openssl
all 27 commands →
Check full cert chain
openssl s_client -connect example.com:443 -showcerts 2>/dev/null | openssl crl2pkcs7 -nocrl | openssl pkcs7 -print_certs -noout -text | grep -E 'Subject:|Issuer:'
Encrypt file with AES-256
openssl enc -aes-256-cbc -pbkdf2 -in secret.txt -out secret.enc
Decrypt AES-256 file
openssl enc -d -aes-256-cbc -pbkdf2 -in secret.enc -out secret.txt
Generate random hex token
openssl rand -hex 32
Full certificate inspect
openssl x509 -in cert.pem -noout -text