Displaying Certificate Info

Overview

This page describes how to display certificate and CSR information which includes:

• serial number

• subject DN

• issuer DN

• validity range

• Certificate Extensions

NSS

To display the content of a certificate in internal token:

$ certutil -L -d <NSS database> -n <nickname>

To display the content of a certificate in HSM:

$ certutil -L -d <NSS database> -h <token> -f <HSM password file> -n <token>:<nickname>

OpenSSL

To display the content of a certificate in a PEM file:

$ openssl x509 -text -noout -in <filename>

To display the content of a CSR in a PEM file:

$ $ openssl req -text -noout -in <filename>