Mozilla "certutil -O" - Print Certificate Chain in cert8.db
Q
How to print out the certificate chain a "cert8.db" file using Mozilla "certutil" tool?
✍: FYIcenter.com
A
If you want to print out the certificate chain in a "cert8.db" file, you can use the Mozilla "certutil -O" command as shown in this tutorial:
C:\fyicerter>\fyicerter\nss\bin\certutil -O -d .\ -n "GeoTrust SSL CA" "Builtin Object Token:GeoTrust Global CA" [CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US] "GeoTrust SSL CA" [CN=GeoTrust SSL CA,O="GeoTrust, Inc.",C=US]
What you are getting from this tutorial:
- "-O" command prints out the certificate chain (or path) from the certificate database.
- '-n "GeoTrust SSL CA"' specifies a name for the starting certificate.
Note that "GeoTrust Global CA" is labeled as a "Builtin Object Token" certificate. May be because it is a self-signed root CA.
2012-12-09, 5081👍, 0💬