Additional SSL Troubleshooting Commands

Verify Certificate Trust Chain

To verify the trust chain of a certificate, run:

openssl verify -CAfile rootCA.pem cert.pem

Check Certificate Expiry

To check the expiry date of a certificate, execute:

openssl x509 -enddate -noout -in cert.pem

Test SSL Handshake with OpenSSL

To test the SSL handshake for a specific service, use:

openssl s_client -connect hostname:port -CAfile truststore.pem

Check for Specific SSL Errors

To diagnose specific SSL errors, run:

openssl s_client -connect hostname:port

Display Certificate Details

To display detailed information about a certificate, execute:

openssl x509 -in cert.pem -text -noout