DH Keys DSA Keys EC Keys Firefox General Google Chrome IE (Internet Explorer) Intermediate CA Java VM JDK Keytool Microsoft CertUtil Mozilla CertUtil OpenSSL Other Portecle Publishers Revoked Certificates Root CA RSA Keys Tools Tutorial What Is Windows

Mozilla "certutil -O" - Print Certificate Chain in cert8.db

Q

How to print out the certificate chain a "cert8.db" file using Mozilla "certutil" tool?

✍: FYIcenter.com

A

If you want to print out the certificate chain in a "cert8.db" file, you can use the Mozilla "certutil -O" command as shown in this tutorial: 

C:\fyicerter>\fyicerter\nss\bin\certutil -O -d .\
-n "GeoTrust SSL CA"

"Builtin Object Token:GeoTrust Global CA" 
   [CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US]

  "GeoTrust SSL CA" [CN=GeoTrust SSL CA,O="GeoTrust, Inc.",C=US]

What you are getting from this tutorial:

  • "-O" command prints out the certificate chain (or path) from the certificate database.
  • '-n "GeoTrust SSL CA"' specifies a name for the starting certificate.

Note that "GeoTrust Global CA" is labeled as a "Builtin Object Token" certificate. May be because it is a self-signed root CA.

2012-12-09, 5250👍, 0💬

DH Keys DSA Keys EC Keys Firefox General Google Chrome IE (Internet Explorer) Intermediate CA Java VM JDK Keytool Microsoft CertUtil Mozilla CertUtil OpenSSL Other Portecle Publishers Revoked Certificates Root CA RSA Keys Tools Tutorial What Is Windows