Voir les informations contenus dans un certificat

Création — Nicolas THOREZ 2020/01/21 11:06

Pour afficher les information contenu dans un certificat, on peut utiliser la commande openssl :

openssl x509 -in certificat.pem -text

La console renverra alors toutes les informations contenus dans le certificat. Par exemple, pour un snake-oil.pem d'apache :

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            82:68:80:62:5d:c4:0e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN = webserver.shyrkasys.local
        Validity
            Not Before: Mar 22 14:27:32 2019 GMT
            Not After : Mar 19 14:27:32 2029 GMT
        Subject: CN = webserver.shyrkasys.local
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cb:81:cb:0f:e7:11:4e:69:99:9a:90:66:2d:02:
                    64:85:dd:87:6d:01:0c:cc:05:49:82:88:58:58:80:
                    fd:b8:2c:bb:ff:60:c4:38:73:58:91:31:d8:7b:cd:
                    27:c5:f4:12:36:02:a7:21:a0:62:88:02:28:bb:da:
                    fc:87:9a:b9:db:40:4d:1d:db:66:0b:7b:91:f6:87:
                    07:ac:fd:53:1c:1a:77:52:27:ac:b3:09:83:51:67:
                    35:e9:54:48:57:ac:d4:5a:67:e3:e4:e2:c6:ab:43:
                    58:bc:2a:92:25:03:44:13:82:dd:7e:73:8a:99:58:
                    d9:de:b6:2e:fe:fd:d0:a7:71:5f:af:68:73:f7:3b:
                    b0:e1:f9:e7:b8:31:34:12:52:d2:8d:65:f0:ef:74:
                    ec:fc:ac:d7:40:74:41:e9:e5:52:83:c4:05:c9:1a:
                    9b:2d:36:15:90:72:0c:f7:50:21:dd:a7:9b:4f:1d:
                    24:45:94:f2:9f:a1:55:4b:2c:be:8c:20:8d:89:8c:
                    a8:c4:fd:a3:16:8b:fd:5d:ef:4a:fb:ca:de:6b:88:
                    52:30:af:18:69:53:17:0a:b2:66:60:e5:b1:b6:76:
                    1e:11:89:77:8a:81:e2:24:f2:6d:62:33:74:ca:39:
                    ab:94:43:f7:d0:d4:31:9e:6a:fe:c4:61:60:cd:4d:
                    e1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Subject Alternative Name: 
                DNS:webserver.shyrkasys.local
    Signature Algorithm: sha256WithRSAEncryption
         9f:37:51:ac:90:83:1d:24:5e:9a:4a:89:73:e2:d7:4e:69:e1:
         44:b7:f6:44:72:90:a8:62:8b:af:b2:2f:f6:72:35:e8:01:6a:
         d1:d7:4f:91:8a:34:f4:b6:5f:3f:b7:6f:66:70:87:8b:35:ff:
         9b:a9:53:09:f4:46:6f:43:d6:84:1e:2d:74:eb:6b:20:43:dc:
         46:b6:3b:4f:85:81:73:8b:9a:2b:c6:2e:5c:ea:46:8b:a9:03:
         cb:4b:c9:1e:e7:38:c4:00:db:7b:56:e9:4d:0f:79:5d:d8:ea:
         a2:f7:e6:57:5a:ba:e8:dd:f8:4b:a1:63:cf:1f:80:21:ec:31:
         d1:67:19:4c:14:76:5d:d9:fc:6e:c7:bb:ea:5d:5a:4e:ef:cd:
         06:a0:ad:38:2c:9b:73:82:1d:e7:5c:30:82:05:d8:d2:9f:d0:
         40:8d:f0:79:5b:58:fc:ba:4c:a7:7f:71:39:19:ea:57:b0:6b:
         65:ac:77:c1:fb:f2:bb:c3:9e:ee:dd:42:82:bf:c0:e0:05:6e:
         f1:1b:73:88:37:fc:54:62:fd:19:62:de:e3:3a:23:6e:3d:3a:
         72:63:e6:dc:e8:bc:2c:77:bb:99:1f:12:64:72:cf:b6:1c:a7:
         66:e6:e0:e6:d7:8f:8a:de:8c:f2:af:3d:12:91:dc:67:52:bc:
         63:db:c8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----