Version 2 (modified by 11 years ago) (diff) | ,
---|
Download the SSL Certificate from a server
You can use openssl
to find the signer of the SSL certificate. Use as the hostname the URL of the server:
openssl s_client -showcerts -connect <HOSTNAME>:12369
Note: if that command complains about a "self signed certificate in certificate chain", you can try with the debug and prexit flags:
openssl s_client -debug -prexit -showcerts -connect <HOSTNAME>:12369
That command will yield the SSL certificate chain. The first one, "Certificate 0" (zero), is the actual SSL certificate. The second one, "Certificate 1", is the signer. That's the one you want.