FixYourIP Home About Library Tools

Library - Openssl Howto


  1. Display Certificate Subject Name in a readable format
  2. Verify Certificate Chain
  3. View PKCS#12 file
  4. Convert PKCS#12 to PEM format
  5. View PKCS#7 certificates
  6. Convert PKCS#7 to DER format
  7. Convert Certificate from DER to PEM format
  8. Display Certificate's thumbprint

    Display Certificate Subject name in readable format

    openssl x509 -in CERTIFICATE_FILE -noout -subject -nameopt multiline,-lname,-align


    If you don't have openssl available use our certificate viewer

    Top


    To verify a certificate chain

    openssl verify CERTIFICATE_FILE


    The file CERTIFICATE_FILE contain the intermediate certificate first and the servers certificate.

    Check your Certificate using the Certificate Check tool at the bottom of the page



    Top


    To view a PKCS#12 file using openssl command

    openssl pkcs12 -in CertName.p12

    A PKCS#12 file contains the certificate, private key and all the intermediate certificate's in a certificate chain and is encrypted with a password.



    Top

    Convert PKCS#12 file to pem format using openssl command

    openssl x509 -inform der -in certname.p12 -out convertedfile

    Top


    To view PKCS#7 files using openssl command

    The PKCS #7 format enables the transfer of a certificate and all the certificates in its certification path from one computer to another, or from a computer to removable media. PKCS #7 files typically use the .p7b extension, and are compatible with the ITU-T X.509 standard



    openssl pkcs7 -in filename_containing_cert -print_certs -out cert.pem


    Top

    Convert a PKCS#7 file from PEM to DER using openssl command

    command: openssl pkcs7 -in filename_containing_cert -outform DER -out file.der

    Top

    Convert a DER formatted certificate to PEM using openssl command


    openssl x509 -in DER_formatted_certificate -inform DER -outform PEM -out new_fil.pem

    Top


    Display Certificate Thumbprint

    To display certificate thumbprint using open source software namely openssl

    1. openssl x509 -in CERTIFICATE_FILE -noout -sha1 -fingerprint
    2. openssl x509 -in CERTIFICATE_FILE -noout -fingerprint



    Note: Please replace CERTIFICATE_FILE with the actual file which contains the certificate

    Top



More Tools

Check Mail Certificate
Check Web Certificate

Copyright © 2008-09 www.fixyourip.com.