Unable to get certificate expiry dateSSL Error - unable to read server certificate from fileOpenvpn signing certificates with wrong CAChecking the issued and expiry dates for the certificates involved a certificate chainHow to debug certificate chains with OpenSSL?OCSP validation - unable to get local issuer certificateUnable to use builtin CA bundle to verify GoDaddy SHA2 SSL certificateWhy can I not parse my certificate signing request with openssl on my Windows workstationIntermittent API/SSL IssueApache 2.4.23 reports “server certificate does NOT include an ID”, but everything worksTrying to connect to LDAPS (Windows active directory) but keep receiving Verify return code: 20 (unable to get local issuer certificate) error
Why did WWI include Japan?
Would a "Permanence" spell in 5e be overpowered?
How to pass query parameters in URL in Salesforce Summer 19 Release?
Should homeowners insurance cover the cost of the home?
Make me a minimum magic sum
Why did the Apollo 13 crew extend the LM landing gear?
Sheared off exhasut pipe: How to fix without a welder?
Why are the capacitors necessary for a quartz crystal?
Has the Hulk always been able to talk?
weird pluperfect subjunctive in Eutropius
Why does sound not move through a wall?
Where to draw the line between quantum mechanics theory and its interpretation(s)?
When did England stop being a Papal fief?
All superlinear runtime algorithms are asymptotically equivalent to convex function?
My large rocket is still flipping over
Can I hide the part of long lines that exceeds the visual line?
Is there an age requirement to play in Adventurers League?
Some Russian letters overlap the next line of text when used in drop caps
Dangerous workplace travelling
Meaning of the (idiomatic?) expression "seghe mentali"
Why are oscilloscope input impedances so low?
Hostile Divisor Numbers
In linear regression why does regularisation penalise the parameter values as well?
Should I simplify my writing in a foreign country?
Unable to get certificate expiry date
SSL Error - unable to read server certificate from fileOpenvpn signing certificates with wrong CAChecking the issued and expiry dates for the certificates involved a certificate chainHow to debug certificate chains with OpenSSL?OCSP validation - unable to get local issuer certificateUnable to use builtin CA bundle to verify GoDaddy SHA2 SSL certificateWhy can I not parse my certificate signing request with openssl on my Windows workstationIntermittent API/SSL IssueApache 2.4.23 reports “server certificate does NOT include an ID”, but everything worksTrying to connect to LDAPS (Windows active directory) but keep receiving Verify return code: 20 (unable to get local issuer certificate) error
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
Unable to get certificate expiry date using below command.
Command:
openssl s_client -servername www-abcecommerce.com -connect www-abcecommerce.com:443 2>/dev/null | openssl x509 -noout -issuer -subject -dates
Error:
unable to load certificate
18936:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:707:Expecting: TRUSTED CERTIFICATE
ssl ssl-certificate openssl
add a comment |
Unable to get certificate expiry date using below command.
Command:
openssl s_client -servername www-abcecommerce.com -connect www-abcecommerce.com:443 2>/dev/null | openssl x509 -noout -issuer -subject -dates
Error:
unable to load certificate
18936:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:707:Expecting: TRUSTED CERTIFICATE
ssl ssl-certificate openssl
add a comment |
Unable to get certificate expiry date using below command.
Command:
openssl s_client -servername www-abcecommerce.com -connect www-abcecommerce.com:443 2>/dev/null | openssl x509 -noout -issuer -subject -dates
Error:
unable to load certificate
18936:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:707:Expecting: TRUSTED CERTIFICATE
ssl ssl-certificate openssl
Unable to get certificate expiry date using below command.
Command:
openssl s_client -servername www-abcecommerce.com -connect www-abcecommerce.com:443 2>/dev/null | openssl x509 -noout -issuer -subject -dates
Error:
unable to load certificate
18936:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:707:Expecting: TRUSTED CERTIFICATE
ssl ssl-certificate openssl
ssl ssl-certificate openssl
edited Apr 26 at 16:25
Nan
asked Apr 26 at 16:19
NanNan
62
62
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
openssl s_client -servername www-abcecommerce.com -connect www-abcecommerce.com:443 2>/dev/null ...
There is no need to pipe stderr to /dev/null since it would not be put into the pipe anyway. And once you skip dropping stderr you'll see:
gethostbyname failure
connect:errno=0
Thus, the domain name you've used is simply wrong. Therefore the connection fails and therefore it cannot do a TLS handshake and therefore it cannot provide the certificate and therefore you cannot extract information from the certificate.
It might be that the real web site you've wanted to analyze is www.abcecommerce.com and not www-abcecommerce.com. Only, this site is only accessible by HTTP and not by HTTPS which means no certificate either.
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f964771%2funable-to-get-certificate-expiry-date%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
openssl s_client -servername www-abcecommerce.com -connect www-abcecommerce.com:443 2>/dev/null ...
There is no need to pipe stderr to /dev/null since it would not be put into the pipe anyway. And once you skip dropping stderr you'll see:
gethostbyname failure
connect:errno=0
Thus, the domain name you've used is simply wrong. Therefore the connection fails and therefore it cannot do a TLS handshake and therefore it cannot provide the certificate and therefore you cannot extract information from the certificate.
It might be that the real web site you've wanted to analyze is www.abcecommerce.com and not www-abcecommerce.com. Only, this site is only accessible by HTTP and not by HTTPS which means no certificate either.
add a comment |
openssl s_client -servername www-abcecommerce.com -connect www-abcecommerce.com:443 2>/dev/null ...
There is no need to pipe stderr to /dev/null since it would not be put into the pipe anyway. And once you skip dropping stderr you'll see:
gethostbyname failure
connect:errno=0
Thus, the domain name you've used is simply wrong. Therefore the connection fails and therefore it cannot do a TLS handshake and therefore it cannot provide the certificate and therefore you cannot extract information from the certificate.
It might be that the real web site you've wanted to analyze is www.abcecommerce.com and not www-abcecommerce.com. Only, this site is only accessible by HTTP and not by HTTPS which means no certificate either.
add a comment |
openssl s_client -servername www-abcecommerce.com -connect www-abcecommerce.com:443 2>/dev/null ...
There is no need to pipe stderr to /dev/null since it would not be put into the pipe anyway. And once you skip dropping stderr you'll see:
gethostbyname failure
connect:errno=0
Thus, the domain name you've used is simply wrong. Therefore the connection fails and therefore it cannot do a TLS handshake and therefore it cannot provide the certificate and therefore you cannot extract information from the certificate.
It might be that the real web site you've wanted to analyze is www.abcecommerce.com and not www-abcecommerce.com. Only, this site is only accessible by HTTP and not by HTTPS which means no certificate either.
openssl s_client -servername www-abcecommerce.com -connect www-abcecommerce.com:443 2>/dev/null ...
There is no need to pipe stderr to /dev/null since it would not be put into the pipe anyway. And once you skip dropping stderr you'll see:
gethostbyname failure
connect:errno=0
Thus, the domain name you've used is simply wrong. Therefore the connection fails and therefore it cannot do a TLS handshake and therefore it cannot provide the certificate and therefore you cannot extract information from the certificate.
It might be that the real web site you've wanted to analyze is www.abcecommerce.com and not www-abcecommerce.com. Only, this site is only accessible by HTTP and not by HTTPS which means no certificate either.
answered Apr 26 at 16:54
Steffen UllrichSteffen Ullrich
8,8221529
8,8221529
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f964771%2funable-to-get-certificate-expiry-date%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown