"keytool -printcert" Command Examples

"keytool -printcert" Command Examples - Download Certificate

Q

Can I use the "keytool -printcert" command to download the certificate from a Web site? I know the Web site uses HTTPS and it has a certificate.

✍: FYIcenter.com

A

When a Web site uses the HTTPS address, it does have a certificate that contains its public key. Your browser is smart to download it automatically to encrypt your data exchanged with the server. to give you security protection.

But if you want get a copy of the Web site's certificate, you can use the "keytool -printcert" command with the "-sslserver" option as shown in this example:

C:\Users\fyicenter> keytool -printcert
-sslserver www.facebook.com -rfc > facebook.pem

C:\Users\fyicenter>type facebook.pem

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

What the "keytool -printcert" command shown above did for you:

Connects to the www.facefook.com HTTPS server.
Download two certificates used by www.facebook.com.
Save both certificates in facebook.pem in PEM format using the "-rfc" option.

⇒ Why www.facebook.com Has 2 Certificates

⇐ "keytool -printcert" Command Examples - Print Certificate Info

⇑ Managing Certificates with Java Keytool

⇑⇑ Java Keytool: Certificate Management Tool

2012-07-20, 9279🔥, 0💬

💬 2014-03-08 FYIcenter.com: Hi vadvadf, what kind of help do you need?

💬 2014-03-07 vadvadf: no help at all

"keytool -exportcert" Command Examples - Exporting Certificate
How to use the "keytool -exportcert" command? I want to export a certificate out of a keystore file and send it to someone else. Here is an example of using "keytool -exportcert" command to export the self-signed certificate in the "2ndkey" entry from the default keystore file: C:\Users\fyicenter&am... 2012-07-19, 29907🔥, 0💬

"keytool -importcert" Command Examples - Save Certificate to Keystore
How to use the "keytool -importcert" command? I have a certificate downloaded from a Web site and want to save it in a keystore file. Here is an example of using "keytool -exportcert" command to save the www.facebook.com certifcate into the default keystore file: C:\Users\fyicenter> keytool -... 2012-07-20, 23194🔥, 0💬

"keytool -list" Command Examples - List Keystore Entries
How to use the "keytool -list" command? I want to see what in the keystore file. Here is an example of using "keytool -list" command to display a list of all entries in the default keystore file: C:\Users\fyicenter> keytool -list -storepass FYIcenter Keystore type: JKS Keystore provider: SUN ... 2012-07-19, 20581🔥, 0💬

"keytool -printcert" Command Examples - Print Certificate Info
How to use the "keytool -printcert" command? I want to see what to see more information about a certificate. Here is an example of using "keytool -printcert" command to extract owner, issuer, serial number, expiration date and other information from a certificate: C:\Users\fyicenter> keytool ... 2012-07-20, 19102🔥, 0💬

Java "keytool -importcert" Command Options
What options are supported by the "keytool -importcert" command? Java Keytool can be used to save the certificate received from others into a keystore file using the "keytool -importcert" command, which supports the following options: C:\Users\fyicenter> keytool -importcert -help keytool -imp... 2012-07-20, 17904🔥, 0💬

Java "keytool -certreq" Command Options
What options are supported by the "keytool -certreq" command? Java Keytool can be used to generate a certificate signing request file using the "keytool -certreq" command. A certificate signing request file contains the owner's public key for the Certificate Authority (CA) to sign it into a certific... 2012-07-20, 17625🔥, 0💬

Java "keytool -printcert" Command Options
What options are supported by the "keytool -printcert" command? Java Keytool can be used to printout owner, issuer, serial number and other information from a certificate using the "keytool -printcert" command, which supports the following options: C:\Users\fyicenter> keytool -printcert -help... 2012-07-19, 15479🔥, 0💬

Split Certificate Chain File
How to split a certificate chain file into individual certificate files? I have 2 certificates in a certificate chain file in PEM format. If you have a certificate chain file in PEM format, you can split each certificate out of the chain file using any text editor as shown in this tutorial: Assume t... 2012-07-20, 13671🔥, 0💬

Why www.facebook.com Has 2 Certificates
Why www.facebook.com has 2 certificates for their HTTPS Web site? To understand why www.facebook.com has 2 certificates, let's use the "keytool -printcert" command print out owners and issuers of those certificates: C:\Users\fyicenter> keytool -printcert -file facebook.pem Certificate[1]: Own... 2012-07-20, 9564🔥, 0💬

All rights in the contents of this web site are reserved by the individual author. fyicenter.com does not guarantee the truthfulness, accuracy, or reliability of any contents.