All info from a CSR file:
~ $ openssl req -noout -text -in www.mydomainssl.com.csr
All info from a CRT file:
~ $ openssl x509 -noout -text -in www.mydomainssl.com.crt
Expiration date:
~ $ openssl x509 -noout -dates -in www.mydomainssl.com.csr
Verify the CSR file:
~ $ openssl req -verify -in www.mydomainssl.com.csr
Verify the KEY:
~ $ openssl rsa -check -in www.mydomainssl.com.key
Compare the md5 KEY, CSR and CRT to check if they match:
~ $ openssl rsa -noout -modulus -in www.mydomainssl.com.key | openssl md5 ~ $ openssl req -noout -modulus -in www.mydomainssl.com.csr | openssl md5 ~ $ openssl x509 -noout -modulus -in www.mydomainssl.com.crt | openssl md5
Extract secure HTTP info remotely:
~ $ openssl s_client -showcerts -connect www.mydomainssl.com:443
Extract secure SMTP info remotely:
~ $ openssl s_client -showcerts -connect www.mydomainssl.com:465