echo | openssl s_client -showcerts -connect www.example.com:443 2> /dev/null | sed -n '/-----BEGIN CERTIFICATE-----/,/-----END CERTIFICATE-----/p' > www.example.com.crt
awk -v RS='-----END CERTIFICATE-----' 'RT{print $0 RT > "www.example.com"++i".crt"}' www.example.com.crt
openssl x509 -noout -text -in www.example1.com.crt
openssl x509 -noout -text -in www.example.com2.crt
openssl x509 -noout -text -in www.example.com3.crt
SSL工具/小程序https/SSL兼容性
在线检测HTTPS网站或/接口是否支持微信小程序/支付宝小程序对SSL的要求,比如TLS版本、证书是否过期或有效、证书链完整性等。
https://www.ssleye.com/ssltool/weixin_check.html
![](https://img.haomeiwen.com/i12979420/8157be2d2b8857dd.png)
SSL证书在线检测工具
https://csr.chinassl.net/ssl-checker.html
![](https://img.haomeiwen.com/i12979420/4c2e4fa54b470183.png)
![](https://img.haomeiwen.com/i12979420/ef01fe341d7ea518.png)
SSL证书购买
https://www.sslaaa.com/ssl-price
![](https://img.haomeiwen.com/i12979420/c016cc82fe21c177.png)
证书链补齐,在线工具:
https://www.sslaaa.com/tools/get_chain
https://www.racent.com/download-cert-chain
参考
sed 、awk 切割证书文件
https://www.jianshu.com/p/fae61ebfec45
CFCA根证书的查看和导入
https://www.jianshu.com/p/950506c9d7c2
域名证书文件包含两段证书
https://www.cnblogs.com/uscWIFI/p/13958198.html
网友评论