[리눅스] SSL(TLS) 인증서의 만료 날짜 확인

728x90

SSL(TLS) 인증서의 만료 날짜 확인

sangchul.kr SSL 인증서 만료일 조회

$ openssl s_client -connect sangchul.kr:443 | openssl x509 -noout -enddate

$ echo | openssl s_client -servername sangchul.kr -connect sangchul.kr:443 2>/dev/null | openssl x509 -noout -dates
notBefore=Aug 24 16:40:08 2020 GMT
notAfter=Nov 22 16:40:08 2020 GMT

$ openssl s_client -connect sangchul.kr:443 | openssl x509 -noout -enddate
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = sangchul.kr
verify return:1
notAfter=Nov 22 16:40:08 2020 GMT

sangchul.kr SSL 인증서 확인

$ echo '' | openssl s_client -connect sangchul.kr:443 | openssl x509 -noout -text

$ openssl s_client -connect sangchul.kr:443 | tee sangchul.kr.txt
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = sangchul.kr
verify return:1
CONNECTED(00000003)
---
Certificate chain
 0 s:CN = sangchul.kr
   i:C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
 1 s:C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
   i:O = Digital Signature Trust Co., CN = DST Root CA X3
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgISA7HqKFB2v3f1AqD67hXuOYBcMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
....


$ echo '' | openssl s_client -connect sangchul.kr:443 | openssl x509 -noout -text
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = sangchul.kr
verify return:1
DONE
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b1:ea:28:50:76:bf:77:f5:02:a0:fa:ee:15:ee:39:80:5c
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
        Validity
            Not Before: Aug 24 16:40:08 2020 GMT
            Not After : Nov 22 16:40:08 2020 GMT
        Subject: CN = sangchul.kr
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:c0:cf:28:9f:d6:0a:0d:c7:7c:8b:d0:2c:
                    41:97:86:d9:80:d4:71:6a:ee:08:4d:e2:5a:28:d4:

SSL(TLS) 인증서 만료일 확인 스크립트

ExpirationDate.sh 파일 생성

$ vim ExpirationDate.sh
#!/bin/bash

SERVER_NAME=${1:-google.com}
PORT=${2:-443}

echo Domain Name : ${SERVER_NAME}
echo '' | openssl s_client -servername ${SERVER_NAME} -connect ${SERVER_NAME}:${PORT} 2>/dev/null | openssl x509 -noout -dates

$ chmod +x ExpirationDate.sh

$ ./ExpirationDate.sh
Domain Name : google.com
notBefore=Nov  1 02:19:52 2021 GMT
notAfter=Jan 24 02:19:51 2022 GMT


$ ./ExpirationDate.sh scbyun.com
Domain Name : scbyun.com
notBefore=Oct 14 23:30:33 2021 GMT
notAfter=Jan 12 23:30:32 2022 GMT


$ ./ExpirationDate.sh scbyun.com 443
Domain Name : scbyun.com
notBefore=Oct 14 23:30:33 2021 GMT
notAfter=Jan 12 23:30:32 2022 GMT

728x90

저작자표시비영리동일조건

• 카카오스토리
• 트위터
• 페이스북

'리눅스' 카테고리의 다른 글

[VPN] Linux에서 SoftEther VPN 클라이언트 설치  (0)	2021.12.06
[리눅스] ftps(ftp + ssl) 클라이언트 접속 방법  (0)	2021.12.06
[리눅스] SSL(TLS) 인증서의 만료 날짜 확인  (0)	2021.12.05
[리눅스] 웹 프록시 자동 검색 프로토콜(Auto-Discovery Protocol)  (0)	2021.12.03
[리눅스] elasticsearch 클러스터 구성에서 인덱스 생성  (0)	2021.12.02
[리눅스] HAProxy 패스워드 설정  (0)	2021.12.02