robjtede / inspect-cert-chain

Inspect and debug TLS certificate chains (without OpenSSL)

inspect-cert-chain

OpenSSL-like text output for debugging certificate chains.

Install

With cargo-binstall:

$ cargo binstall inspect-cert-chain

From source:

$ cargo install inspect-cert-chain

Usage

From remote host:

inspect-cert-chain --host <hostname>

From chain file:

inspect-cert-chain --file <path>

From stdin:

cat <path> | inspect-cert-chain --file -

Roadmap

• OpenSSL-like text info.
• Fetch certificate chain from remote host.
• Read certificate chain from file and stdin.
• Interpret standard X.509 extensions.
• Option to read local chain files.
• Determine chain validity.