AskOverflow.Dev

AskOverflow.Dev Logo AskOverflow.Dev Logo

AskOverflow.Dev Navigation

  • 主页
  • 系统&网络
  • Ubuntu
  • Unix
  • DBA
  • Computer
  • Coding
  • LangChain

Mobile menu

Close
  • 主页
  • 系统&网络
    • 最新
    • 热门
    • 标签
  • Ubuntu
    • 最新
    • 热门
    • 标签
  • Unix
    • 最新
    • 标签
  • DBA
    • 最新
    • 标签
  • Computer
    • 最新
    • 标签
  • Coding
    • 最新
    • 标签
主页 / computer / 问题 / 1656316
Accepted
244boy
244boy
Asked: 2021-06-13 01:50:50 +0800 CST2021-06-13 01:50:50 +0800 CST 2021-06-13 01:50:50 +0800 CST

是否可以检查 SSL 密钥的到期时间?

  • 772

我有一个 ssl 证书和 ssl 密钥,是否可以检查其到期时间?

例如。ssl 密钥:

-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----

ssl 证书(省略)

因为我有时在 macos 钥匙串中知道站点的证书有到期时间。如果我只知道 ssl key 和 ssl cert 数据,是否可以获得到期时间?

ssl certificate
  • 1 1 个回答
  • 80 Views

1 个回答

  • Voted
  1. Best Answer
    Daniel B
    2021-06-13T01:57:14+08:002021-06-13T01:57:14+08:00

    密钥不会过期。证书可以。证书是二进制数据。没有工具,它们是不可读的。

    根据证书的编码方式,您只需将其重命名为.cer并在 Windows 上打开即可。然后它将向您显示证书中的所有数据。

    使用 OpenSSL,您可以在命令行上检查证书:

    openssl x509 -text -noout -in cert.pem
    

    OpenSSL 基本上适用于所有东西,但您可能必须先安装它。

    你会得到这样的东西:

    Certificate:
        Data:
            Version: 3 (0x2)
            Serial Number:
                04:11:24:0f:88:1e:34:22:06:94:05:d0:74:e5:be:96:00:ec
        Signature Algorithm: sha256WithRSAEncryption
            Issuer: C=US, O=Let's Encrypt, CN=R3
            Validity
                Not Before: May 16 13:25:30 2021 GMT
                Not After : Aug 14 13:25:30 2021 GMT
            Subject: CN=*.stackexchange.com
            Subject Public Key Info:
                Public Key Algorithm: rsaEncryption
                    Public-Key: (2048 bit)
                    Modulus:
                        00:b6:91:0f:2e:ad:e9:c1:d3:44:32:5a:a3:2d:f7:
                        ca:2f:25:6e:6b:e0:ca:39:d9:63:36:1e:b7:d1:21:
                        ae:cb:43:12:aa:11:80:dc:3b:30:a9:7b:02:ed:66:
                        c5:42:ea:b3:9b:61:5d:17:2f:4f:36:d4:fd:7e:df:
                        ae:da:97:7d:23:e0:e0:f4:be:19:83:9e:a3:1b:2b:
                        32:a3:11:74:40:6c:dd:e3:ef:20:ee:2d:dc:0f:c2:
                        49:ce:89:fe:b2:fb:5f:c4:66:55:b5:4e:8b:23:2a:
                        79:33:2b:e7:94:7f:5d:2a:d8:ea:45:11:35:63:e5:
                        b6:69:b6:6d:b4:05:50:f8:15:76:36:6c:97:c6:d8:
                        61:6d:91:18:8a:69:a0:7a:71:aa:4c:d6:fb:b0:d9:
                        58:8f:f2:f9:e1:c9:9d:54:3d:82:60:81:b2:59:c5:
                        6a:c7:ff:69:c0:f4:31:08:a1:61:da:62:35:82:d5:
                        63:7a:af:4b:66:9e:73:23:63:e8:de:30:74:c4:ed:
                        e0:31:5f:66:70:66:27:fe:8e:a3:4f:c3:98:66:fc:
                        af:2c:0a:7d:f6:ce:e9:26:48:be:e7:12:7b:09:56:
                        7a:9a:f8:bc:9f:6d:5e:c1:56:a9:1b:70:cd:01:71:
                        87:a4:49:d1:3c:5b:31:bd:9d:77:4c:fe:7f:03:2d:
                        44:b9
                    Exponent: 65537 (0x10001)
            X509v3 extensions:
                X509v3 Key Usage: critical
                    Digital Signature, Key Encipherment
                X509v3 Extended Key Usage: 
                    TLS Web Server Authentication, TLS Web Client Authentication
                X509v3 Basic Constraints: critical
                    CA:FALSE
                X509v3 Subject Key Identifier: 
                    9C:66:DB:15:43:B5:06:86:B1:00:76:AC:9E:8F:5E:C0:3C:29:87:E8
                X509v3 Authority Key Identifier: 
                    keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
    
                Authority Information Access: 
                    OCSP - URI:http://r3.o.lencr.org
                    CA Issuers - URI:http://r3.i.lencr.org/
    
                X509v3 Subject Alternative Name: 
                    DNS:*.askubuntu.com, DNS:*.blogoverflow.com, DNS:*.mathoverflow.net, DNS:*.meta.stackexchange.com, DNS:*.meta.stackoverflow.com, DNS:*.serverfault.com, DNS:*.sstatic.net, DNS:*.stackexchange.com, DNS:*.stackoverflow.com, DNS:*.stackoverflow.email, DNS:*.superuser.com, DNS:askubuntu.com, DNS:blogoverflow.com, DNS:mathoverflow.net, DNS:openid.stackauth.com, DNS:serverfault.com, DNS:sstatic.net, DNS:stackapps.com, DNS:stackauth.com, DNS:stackexchange.com, DNS:stackoverflow.blog, DNS:stackoverflow.com, DNS:stackoverflow.email, DNS:stacksnippets.net, DNS:superuser.com
                X509v3 Certificate Policies: 
                    Policy: 2.23.140.1.2.1
                    Policy: 1.3.6.1.4.1.44947.1.1.1
                      CPS: http://cps.letsencrypt.org
    
                1.3.6.1.4.1.11129.2.4.2: 
                    ......v.D.e......@....(.......1.?.3........yu.Y5.....G0E.!....Q...g^Mrv..."gK
    ..Y|.q.....|.. d?...#...<...k..V.]J.._.&........v.}>.....Uh$....R.y+..x...j.h.~".....yu.Y].....G0E. ~<H..../Z1..%k.;.Q$$3....m...q)..!....w...O.!............J.C.He...L
        Signature Algorithm: sha256WithRSAEncryption
             18:05:01:11:f4:4e:e7:51:c4:5e:91:9e:3f:ec:bd:8b:32:85:
             5d:74:08:f7:98:15:74:7b:9f:80:49:79:64:a8:ea:7b:0a:0c:
             25:ed:08:d0:09:23:e2:48:55:ca:10:4e:d6:d9:d4:34:c3:85:
             9b:2b:d0:c4:22:b0:d4:66:bf:49:3a:6d:7e:78:b3:e6:56:c3:
             18:83:f4:31:0e:62:3f:34:a6:9d:c4:82:cd:45:13:60:2d:ca:
             9e:7f:5c:63:f7:e4:49:8d:1b:a2:75:cd:72:97:fb:2a:c0:c7:
             62:76:46:93:5f:8c:84:a4:42:99:50:f6:ef:aa:a6:f7:ab:41:
             91:5c:7a:9e:b6:59:4b:e5:b2:da:47:7e:30:30:56:6d:84:0c:
             aa:7e:14:80:6f:31:4e:6f:fa:84:d4:42:0c:ab:b8:8c:c6:77:
             b1:96:e8:a1:e2:ba:e3:57:e1:f8:b4:b9:40:52:e1:da:62:4c:
             d3:0c:7e:41:05:75:a6:ab:9b:71:54:07:36:93:83:f8:f3:38:
             ba:b3:41:eb:32:64:39:74:62:6a:d0:18:6d:f7:72:5a:3a:d5:
             08:e9:29:b0:e3:44:95:ac:2e:d7:29:b6:7a:3c:df:ad:08:55:
             1a:e3:ce:c7:57:fe:8f:1f:66:25:ba:59:73:83:e1:53:ac:38:
             a2:4d:36:39
    
    • 5

相关问题

  • 无法根据自签名 openssl 证书验证 openssl 证书?

  • 在安装了 Windows Admin Center 的服务器的 IIS 上运行网站

  • 续订 letsencrypt SSL 证书后,服务器仅返回响应代码 400

  • 如何设置 DNS、AWS S3、AWS Cloudfront 和 AWS Certificate Manager 以保护多个站点

Sidebar

Stats

  • 问题 205573
  • 回答 270741
  • 最佳答案 135370
  • 用户 68524
  • 热门
  • 回答
  • Marko Smith

    如何减少“vmmem”进程的消耗?

    • 11 个回答
  • Marko Smith

    从 Microsoft Stream 下载视频

    • 4 个回答
  • Marko Smith

    Google Chrome DevTools 无法解析 SourceMap:chrome-extension

    • 6 个回答
  • Marko Smith

    Windows 照片查看器因为内存不足而无法运行?

    • 5 个回答
  • Marko Smith

    支持结束后如何激活 WindowsXP?

    • 6 个回答
  • Marko Smith

    远程桌面间歇性冻结

    • 7 个回答
  • Marko Smith

    子网掩码 /32 是什么意思?

    • 6 个回答
  • Marko Smith

    鼠标指针在 Windows 中按下的箭头键上移动?

    • 1 个回答
  • Marko Smith

    VirtualBox 无法以 VERR_NEM_VM_CREATE_FAILED 启动

    • 8 个回答
  • Marko Smith

    应用程序不会出现在 MacBook 的摄像头和麦克风隐私设置中

    • 5 个回答
  • Martin Hope
    Saaru Lindestøkke 为什么使用 Python 的 tar 库时 tar.xz 文件比 macOS tar 小 15 倍? 2021-03-14 09:37:48 +0800 CST
  • Martin Hope
    CiaranWelsh 如何减少“vmmem”进程的消耗? 2020-06-10 02:06:58 +0800 CST
  • Martin Hope
    Jim Windows 10 搜索未加载,显示空白窗口 2020-02-06 03:28:26 +0800 CST
  • Martin Hope
    v15 为什么通过电缆(同轴电缆)的千兆位/秒 Internet 连接不能像光纤一样提供对称速度? 2020-01-25 08:53:31 +0800 CST
  • Martin Hope
    andre_ss6 远程桌面间歇性冻结 2019-09-11 12:56:40 +0800 CST
  • Martin Hope
    Riley Carney 为什么在 URL 后面加一个点会删除登录信息? 2019-08-06 10:59:24 +0800 CST
  • Martin Hope
    zdimension 鼠标指针在 Windows 中按下的箭头键上移动? 2019-08-04 06:39:57 +0800 CST
  • Martin Hope
    jonsca 我所有的 Firefox 附加组件突然被禁用了,我该如何重新启用它们? 2019-05-04 17:58:52 +0800 CST
  • Martin Hope
    MCK 是否可以使用文本创建二维码? 2019-04-02 06:32:14 +0800 CST
  • Martin Hope
    SoniEx2 更改 git init 默认分支名称 2019-04-01 06:16:56 +0800 CST

热门标签

windows-10 linux windows microsoft-excel networking ubuntu worksheet-function bash command-line hard-drive

Explore

  • 主页
  • 问题
    • 最新
    • 热门
  • 标签
  • 帮助

Footer

AskOverflow.Dev

关于我们

  • 关于我们
  • 联系我们

Legal Stuff

  • Privacy Policy

Language

  • Pt
  • Server
  • Unix

© 2023 AskOverflow.DEV All Rights Reserve