5

I can see the certificate with this command

openssl s_client -host {HOST} -port 443 -prexit -showcerts

How can I save the x509 cert of the website in a PEM - File?

2
  • man x509 should give enough clues, especially the -outform PEM option. Nov 15, 2014 at 12:28
  • i think that -outformis just for converting files into PEM or DER files, but how can I download the x509 file? Nov 15, 2014 at 12:35

1 Answer 1

7

try

echo "" | openssl s_client -host {HOST} -port 443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p'  > cert.pem

then to get all certs in chain , a quick way could be

echo "" | openssl s_client -host {HOST} -port 443 -showcerts | awk '/BEGIN CERT/ {p=1} ; p==1; /END CERT/ {p=0}' > allcerts.pem
1
  • i tried that, but then i only get 1 certificate. but there are 4 or 5 certificates Nov 15, 2014 at 15:50

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .