Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I would like to verify the sender and 'addressee' certificate information of an encrypted/signed file. So far, I came up with the following set of arguments to openssl:

openssl cms -inform DER -cmsout -print -recip my.crt -in cms_file

This returns the following information:

  contentType: pkcs7-envelopedData (1.2.840.113549.1.7.3)
    version: 2
            issuer: O=TheirCompany, CN=TheirCA
            subject: O=TheirCompany, CN=TheirEndpoint
          issuer: O=TheirCompany, CN=TheirCA

So I've got most of the information I'm looking for, except the subject of the recipient. How do I extract this information?

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.