EN
Bash - download public *.pem certificate from https connection
8
points
In this short article, we would like to show how to download public certificate from indicated domain that uses HTTPS protocol.
Run the following command:
openssl s_client -showcerts -connect some-domain.com:443 < /dev/null 2> /dev/null | openssl x509 -outform PEM > downloaded_cert.pem
Where:
-
openssl s_client -showcerts -connect some-domain.com:443 < /dev/null 2> /dev/null
-
openssl x509 -outform PEM > downloaded_cert.pem
Practical example
This section shows how to get dirask.com
cetificate.
Run following command:
openssl s_client -showcerts -connect dirask.com:443 < /dev/null 2> /dev/null | openssl x509 -outform PEM
Example output:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----