openssl-certificate-inspection.sh

openssl s_client -showcerts -connect <your-service-ip>:443 < /dev/null
CONNECTED(00000003)
Can't use SSL_get_servername
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN = codeharmony.net
verify return:1
---
Certificate chain
 0 s:CN = codeharmony.net
   i:C = US, O = Let's Encrypt, CN = R3
   a:PKEY: id-ecPublicKey, 256 (bit); sigalg: RSA-SHA256
   v:NotBefore: Dec 14 20:15:15 2023 GMT; NotAfter: Mar 13 20:15:14 2024 GMT
-----BEGIN CERTIFICATE-----
MIIENDCCAxygAw.....
-----END CERTIFICATE-----
 1 s:CN = codeharmony.net
   i:C = US, O = Let's Encrypt, CN = R3
   a:PKEY: id-ecPublicKey, 256 (bit); sigalg: RSA-SHA256
   v:NotBefore: Dec 14 20:15:15 2023 GMT; NotAfter: Mar 13 20:15:14 2024 GMT
-----BEGIN CERTIFICATE-----
MIIENDCCAxygAw.....
-----END CERTIFICATE-----
 2 s:C = US, O = Let's Encrypt, CN = R3
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Sep  4 00:00:00 2020 GMT; NotAfter: Sep 15 16:00:00 2025 GMT
-----BEGIN CERTIFICATE-----
MIIFFjCCAv6gAw.....
-----END CERTIFICATE-----
 3 s:C = US, O = Internet Security Research Group, CN = ISRG Root X1
   i:O = Digital Signature Trust Co., CN = DST Root CA X3
   a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA256
   v:NotBefore: Jan 20 19:14:03 2021 GMT; NotAfter: Sep 30 18:14:03 2024 GMT
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAw.....
-----END CERTIFICATE-----
---
Server certificate
subject=CN = codeharmony.net
issuer=C = US, O = Let's Encrypt, CN = R3
---
No client certificate CA names sent
Peer signing digest: SHA512
Peer signature type: ECDSA
Server Temp Key: ECDH, prime256v1, 256 bits
---
SSL handshake has read 5363 bytes and written 443 bytes
Verification: OK
---
New, TLSv1.0, Cipher is ECDHE-ECDSA-AES128-SHA
Server public key is 256 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-ECDSA-AES128-SHA
    Session-ID: F249032931614xxxx.....
    Session-ID-ctx:
    Master-Key: 8D2CB1E69562EABE6AEF1ABCC5388EBAA9016Cxxxx.....
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 600 (seconds)
    TLS session ticket:
    0000 - 0a f7 08 f9 e7 7b c7 5e-f4 0e 11 26 6f 74 e7 f8   .....{.^...&ot..
    0010 - 24 96 90 2f 6d f7 bc 8b-5d e9 ea 70 af ee 9b 6e   $../m...]..p...n
    0020 - b0 ae 8a 0d 52 77 3e 28-a7 9a 28 0a 7a fa e9 9e   ....Rw>(..(.z...
    0030 - c3 7f 9a 3e 4d 58 67 10-d8 7a 73 a9 a9 2c d4 5c   ...>MXg..zs..,.\
    0040 - d7 1a 1c 66 ee 5a 16 5d-e1 29 1e 7e 13 62 d6 98   ...f.Z.].).~.b..
    0050 - 21 89 9d be e6 b6 64 ff-cc d4 6c ad 05 d5 c0 8a   !.....d...l.....
    0060 - a1 07 97 0f 94 f3 9c 89-ed fd 64 cf 6f c3 d0 dc   ..........d.o...
    0070 - b3 fa c6 d5 e5 b8 64 83-4e 5e 55 e8 f7 bc 00 f3   ......d.N^U.....
    0080 - f0 98 06 e0 f7 4d 32 7c-de 5a 93 56 73 0f d2 dd   .....M2|.Z.Vs...
    0090 - 30 91 77 6f b3 f5 0c 59-04 20 1b f4 4f 40 da 9c   0.wo...Y. ..O@..
    00a0 - 25 e7 19 dc f7 3d 9b 1c-38 af 87 1a 92 ce c6 a9   %....=..8.......

    Start Time: 1709925756
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
---
DONE