#OPENSSL VERIFY WINDOWS#

N74+ZXNvlDjq9uKOLc+XVb+vglukYI9xu4/aPL83sOi9FVnM/A83WbteD7Xv12YEĢKDzWxbX3K228eoFXoK3QYNuuDBHl9l1q3C6J/llE4/DbH5Ycdhz901Ps3vxjDe/ Go0vAiEAhf41BMtlZy/iYVoB4YEBKVG+a/qfkpqbEgUOuntc0I8wDQYJKoZIhvcNĪQELBQADggEBAFp6MNDlve1g8tdkjdgMjAC9Hb/Av9PvVmclgwnQ2LdQUNIb2Mfy TJRvaz8NeEsqmGpwDwB3ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFĪAABZyox99QAAAQDAEgwRgIhAOtvqLWoohYOEKq1ncVRfFFXEJBfErOdpmk/5M6d Y2Jrrx7XG/g/f+WFcJi/+V9V+lOQIibhmOcCIQD6pPK+aHMG44RSJ+3H+REBqTt/ MV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFnKjH3oQAABAMASDBGAiEA1EeZ3kA3 MS1nMS5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcĪHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHĪQEEcDBuMCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcHguZGlnaWNlcnQuY29tMEUGĬCsGAQUFBzAChjlodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRDīG91ZFNlcnZpY2VzQ0EtMS5jcnQwDAYDVR0TAQH/BAIwADCCAYAGCisGAQQB1nkCīAIEggFwBIIBbAFqAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAĪAFnKjH2xgAABAMARzBFAiEAgkAZ8zzg5y7zMtkNMJN/vjiMrVDSLbf42RIbQfTjģCcCIAMLMBAi6BIMIt1ayd2qoZ2ksNuUdwz4rLjzM+onPVKXAHcAh3W/51l8+IxD KwYBBQUHAwIwgY0GA1UdHwSBhTCBgjA/oD2gO4Y5aHR0cDovL2NybDMuZGlnaWNlĬnQuY29tL0RpZ2lDZXJ0Q2xvdWRTZXJ2aWNlc0NBLTEtZzEuY3JsMD+gPaA7hjloĭHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRDbG91ZFNlcnZpY2VzQ0Et ZS5jb22CFm1haWwuc2VydmljZXMubGl2ZS5jb22CC2hvdG1haWwuY29tgg0qLmhvĭG1haWwuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI ZGYub2ZmaWNlLmNvbYIaYXR0YWNobWVudHMtc2RmLm9mZmljZS5uZXSCCioubGl2 GiFjY3Mtc2RmLmxvZ2luLm1pY3Jvc29mdG9ubGluZS5jb22CGHN1YnN0cmF0ZS1z LmZvb3RwcmludGRucy5jb22CHWNjcy5sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29t YWNobWVudC5vdXRsb29rLmxpdmUubmV0gh1hdHRhY2htZW50Lm91dGxvb2sub2ZmĪWNlLm5ldIIgYXR0YWNobWVudC5vdXRsb29rLm9mZmljZXBwZS5uZXSCFmF0dGFjĪG1lbnRzLm9mZmljZS5uZXSCFiouY2xvLmZvb3RwcmludGRucy5jb22CFioubnJi Ki5vdXRsb29rLmNvbYILb3V0bG9vay5jb22CDW9mZmljZTM2NS5jb22CDyoub2ZmĪWNlMzY1LmNvbYIXKi5vdXRsb29rLm9mZmljZTM2NS5jb22CDCoub2ZmaWNlLmNvīYISb3V0bG9vay5vZmZpY2UuY29tghRzdWJzdHJhdGUub2ZmaWNlLmNvbYIbYXR0 GBTdUdCiMXOpc66PtAF+XYxXy5/w9zAdBgNVHQ4EFgQUL0fgu9ydQXD6H71pyHQgĬhVi6/AwggIQBgNVHREEggIHMIICA4IWKi5pbnRlcm5hbC5vdXRsb29rLmNvbYIN j2aOIlN7MjZgYT0vvyH+tl/Z23Ds3xRAgMBAAGjggV1MIIFcTAfBgNVHSMEGDAW JHe8DDY7/6nDSZ4w+SzyPOlpvvhEe9Yqo+dWpKctTq7hLsc3Mj+zTxUKetp98zrjĬdnjPh5lL159a8Le2TBNK6dHBm+iuhgc0aHU2LK15evx2zC9h83qJNd9gcLJ85P3 KftaKNsOn3RyTU21EFhTQZCtMIeO4fNr5wjDoseArGRsKBYvabCOwM3qShL0cBZ3 PK6J3QkYklqSwdHz3o4vjqDnizb8fnLl18H689E04NOikUxvDbcKKOWCn3uT0Iom

GgEKAoIBAQDetpbO/GvfvQExupvq/gN7BYoENrzXfo0vBX08585S3rTFVYRKbo2z MTExOTEyMDAwMFowajELMAkGA1UEBhMCVVM圎zARBgNVBAgTCldhc2hpbmd0b24xĮDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvījEUMBIGA1UEAxMLb3V0bG9vay5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSUwIwYDVQQDEx圎ĪWdpQ2VydCBDbG91ZCBTZXJ2aWNlcyBDQS0xMB4XDTE4MTExOTAwMDAwMFoXDTIw MIIItjCCB56gAwIBAgIQC74LhQl0K3v4f4DcFGdtVDANBgkqhkiG9w0BAQsFADBL The actual public server certificate is next: Server certificate I:/C=US/O=DigiCert Inc/CN=DigiCert Cloud Services CA-1ġ s:/C=US/O=DigiCert Inc/CN=DigiCert Cloud Services CA-1 The next section contains details about the certificate chain: Certificate chainĠ s:/C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN= Verify error:num=20:unable to get local issuer certificate Loading 'screen' into random state - doneĭepth=1 /C=US/O=DigiCert Inc/CN=DigiCert Cloud Services CA-1 The first section presented is around the connection information: openssl s_client -connect :443 The following example is showing a connection on port 443 against.

The output generated contains multiple sections with - spearators between them. Where is replaced with the fully qualified domain name (FQDN) of the server we want to check.

To query a smtp server you would do the following: openssl s_client -connect :25 -starttls smtp To query a web server you would do the following: openssl s_client -connect :443 The syntax that we use depends on what type of server we are querying.

#OPENSSL VERIFY WINDOWS#

For this article I will be using the Windows version of OpenSSL which can be downloaded from. OpenSSL is available for multiple platforms including Linux, MacOS & Windows (via gnuwin32). OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols. While there are multiple methods that can be used to validate a certificate presented from a server I am going to be focusing on openssl here. Sometimes this is a SMTP server or it could be a web server. From time to time it may be necessary to verify what certificate is being presented by the server that you are connecting to.

Openssl verify