Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The SSL certification limit is comming so I'd like to upgrade these certifications.

Is there any solutions that check the certifications withought server proxy's cache? We have to been under proxy environment.

How can I clear the cache?

share|improve this question

You can use the following to confirm it's valid from the website:

openssl s_client -connect <my url>:443

Or otherwise to verify the certificate chains on the file system before putting them on the website.

openssl verify [-CApath directory] cert.pem
share|improve this answer

Browsers are not too reliable a testing tool for ssl certificate verification any longer because browser writers have been bundling a lot of certificates into the browser's keystore--certificates that one doesn't necessarily expect to see there. cUrl and openssl still seem to be the most reliable tools for verification for me. Also, some Certificate Authorities provide their own verification tools but you're limited in that the site you're looking to check must be Internet accessible.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.