A service I am using is refreshing their SSL certificate and now my connections to their service fail. They were working before the change (as in, 1 hour before the change).
Their old and new server certificates were supposed to be signed by Verisign. How can I manually verify the certificate?
Does running it through the
openssl x509 tool do it automatically?
openssl s_client to connect to their server, I can see the certificate they are sending during SSL handshake. Running it through the x509 tool with the
-text option, I get the following issuer line:
CN= value matches the hostname I am connecting to.
The complaints I am getting while connecting with s_client are (I've omitted the subject lines so as to not name the service):
verify error:num=20:unable to get local issuer certificate verify return:1 verify error:num=27:certificate not trusted verify return:1 verify error:num=21:unable to verify the first certificate verify return:1
Can anyone advise me on how to find out why my tools do not trust this certificate?