X.509 Certificate Decoder

OpenSSL Commands

# View certificate details openssl x509 -in cert.pem -text -noout # Check certificate expiry openssl x509 -in cert.pem -noout -dates # Get certificate from server echo | openssl s_client -connect example.com:443 2>/dev/null | openssl x509 -text # Verify certificate chain openssl verify -CAfile ca-bundle.crt cert.pem

X.509 Field Reference

FieldDescription
CN (Common Name)Domain or entity name
SANSubject Alternative Names — additional domains
O (Organization)Organization name
IssuerCertificate Authority that issued the cert
Not Before/AfterValidity period
Serial NumberUnique identifier from CA