CLI 檢查網站憑證

1

curl https://www.google.com -v -k 2>&1 | grep -E "Connected to|subject|expire"

1
2
3
4
5
6
7
8

❯ curl https://www.google.com -v -k 2>&1 | grep -E "Connected to|subject|expire"
* Connected to www.google.com (2404:6800:4012:2::2004) port 443 (#0)
*  subject: CN=www.google.com
*  expire date: Jun 10 20:38:48 2024 GMT
< expires: -1
< set-cookie: 1P_JAR=2024-04-25-23; expires=Sat, 25-May-2024 23:03:14 GMT; path=/; domain=.google.com; Secure
< set-cookie: AEC=AQTF6Hw4gUm8n5W0uPUDTe6vEa8fTROwT6DEAUWQ6FTKMp52DrhWnROmmw; expires=Tue, 22-Oct-2024 23:03:14 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
< set-cookie: NID=513=TZnGjLI3KvFu_SLuZJCrPktY6GMHeuK3Hg8ht9ojqTr_OgX460hGPFUccru0PZr2J1pWw_mynjevt8eTyWu0pN9gPXi4hcJkFUQzR9SJlTfypnftjNlM9CGEu1956tVk67u6tWkrNRa2zi8QdXzULlXJZ2wO1tBrzCGnmRJ4nyg; expires=Fri, 25-Oct-2024 23:03:14 GMT; path=/; domain=.google.com; HttpOnly

1

echo | openssl s_client -servername www.google.com -connect www.google.com:443 | openssl x509 -noout -dates

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

❯ echo | openssl s_client -servername www.google.com -connect www.google.com:443 | openssl x509 -noout -dates
depth=2 C = US, O = Google Trust Services LLC, CN = GTS Root R1
verify return:1
depth=1 C = US, O = Google Trust Services LLC, CN = GTS CA 1C3
verify return:1
depth=0 CN = www.google.com
verify return:1
DONE
notBefore=Mar 18 20:38:49 2024 GMT
notAfter=Jun 10 20:38:48 2024 GMT