Re: commands to get info from intermediate certificates

2012-11-12 Thread Florian Weimer
* Ali Jawad: Thanks Florian I did go ahead and parsed them, I last question please, in a chain sometimes only the intermediate certificates are returned and at other times the intermediate chains and the root certificate is returned, at least based on digcerts ssl testing utility, how can I

Re: commands to get info from intermediate certificates

2012-11-11 Thread Ali Jawad
Any input on this please ? On Fri, Nov 9, 2012 at 11:17 PM, Ali Jawad alijaw...@gmail.com wrote: Hi When I do visit a website using a browser and check the certificate I can see the intermediate certificates and the info of those certificates. I am wondering how can I see that info using

Re: commands to get info from intermediate certificates

2012-11-11 Thread Florian Weimer
* Ali Jawad: When I do visit a website using a browser and check the certificate I can see the intermediate certificates and the info of those certificates. I am wondering how can I see that info using command line, i know how to display the certificate info and it shows the info of the

Re: commands to get info from intermediate certificates

2012-11-11 Thread Ali Jawad
Hi Florian Thank you for the response, the problem for me is that openssl s_client -showcerts only shows two certificates while the actual number of chain entries is 3, this is what is confusing me. Regards On Sun, Nov 11, 2012 at 7:16 PM, Florian Weimer f...@deneb.enyo.de wrote: * Ali Jawad:

Re: commands to get info from intermediate certificates

2012-11-11 Thread Ali Jawad
For example in the below : echo | openssl s_client -CAfile ./mozilla-root.crt -showcerts -connect ssl.com:443 | openssl x509 -text will only show the issuer/dates/etc information for the first certificate ssl.com and not for the subsequent certificates in the chain. Regards Will only

Re: commands to get info from intermediate certificates

2012-11-11 Thread Florian Weimer
* Ali Jawad: For example in the below : echo | openssl s_client -CAfile ./mozilla-root.crt -showcerts -connect ssl.com:443 | openssl x509 -text will only show the issuer/dates/etc information for the first certificate ssl.com and not for the subsequent certificates in the chain. I

Re: commands to get info from intermediate certificates

2012-11-11 Thread Ali Jawad
Thanks Florian I did go ahead and parsed them, I last question please, in a chain sometimes only the intermediate certificates are returned and at other times the intermediate chains and the root certificate is returned, at least based on digcerts ssl testing utility, how can I differ between an