certifo是一个CLI工具，用来查看x509证书信息。此工具与opesslx509-i<file>-text命令相似，不过它还支持处理链式、多文件和TCP地址。当使用TCP地址参数时，TLS/SSL版本也会打印出来。
用法
certifo[flags][<file>|<host:port>...]+---------------------------------------------------------------------------------------------------------------+|optioalflags|+-----------+---------------------------------------------------------------------------------------------------+|-chais|whethertopritverifiedchaisaswell(olyapplicableforhost)||-expiry|pritexpiryofcertificates||-isecure|whetheraclietverifiestheserver'scertificatechaiadhostame(olyapplicableforhost)||-pem|whethertopritpemaswell||-pem-oly|whethertopritolypem(usefulfordowloadigcertsfromhost)||-versio|certifoversio||-help|help|+-----------+---------------------------------------------------------------------------------------------------+---[vault.com:443TLS1.2]---Versio:3SerialNumber:15424177460318123999SigatureAlgorithm:SHA256-RSAType:ed-etityIssuer:CN=GoDaddySecureCertificateAuthority-G2,OU=https://certs.godaddy.com/repository/,O=GoDaddy.com\,Ic.,L=Scottsdale,ST=Arizoa,C=USValidityNotBefore:Apr805:28:122020UTCNotAfter:Apr1702:03:382022UTCSubject:CN=*.vault.com,OU=DomaiCotrolValidatedDNSNames:*.vault.com,vault.comIPAddresses:KeyUsage:DigitalSigature,KeyEciphermetExtKeyUsage:ServerAuth,ClietAuthCA:falseVersio:3SerialNumber:7SigatureAlgorithm:SHA256-RSAType:itermediateIssuer:CN=GoDaddyRootCertificateAuthority-G2,O=GoDaddy.com\,Ic.,L=Scottsdale,ST=Arizoa,C=USValidityNotBefore:May307:00:002011UTCNotAfter:May307:00:002031UTCSubject:CN=GoDaddySecureCertificateAuthority-G2,OU=https://certs.godaddy.com/repository/,O=GoDaddy.com\,Ic.,L=Scottsdale,ST=Arizoa,C=USDNSNames:IPAddresses:KeyUsage:CertSig,CRLSigExtKeyUsage:CA:trueVersio:3SerialNumber:1828629SigatureAlgorithm:SHA256-RSAType:itermediateIssuer:OU=GoDaddyClass2CertificatioAuthority,O=TheGoDaddyGroup\,Ic.,C=USValidityNotBefore:Ja107:00:002014UTCNotAfter:May3007:00:002031UTCSubject:CN=GoDaddyRootCertificateAuthority-G2,O=GoDaddy.com\,Ic.,L=Scottsdale,ST=Arizoa,C=USDNSNames:IPAddresses:KeyUsage:CertSig,CRLSigExtKeyUsage:CA:true
评论