Mozilla "certutil -O" - Print Certificate Chain in cert8.db

Q

How to print out the certificate chain a "cert8.db" file using Mozilla "certutil" tool?

✍: FYIcenter.com

A

If you want to print out the certificate chain in a "cert8.db" file, you can use the Mozilla "certutil -O" command as shown in this tutorial:

C:\fyicerter>\fyicerter\nss\bin\certutil -O -d .\
-n "GeoTrust SSL CA"

"Builtin Object Token:GeoTrust Global CA" 
   [CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US]

  "GeoTrust SSL CA" [CN=GeoTrust SSL CA,O="GeoTrust, Inc.",C=US]

What you are getting from this tutorial:

  • "-O" command prints out the certificate chain (or path) from the certificate database.
  • '-n "GeoTrust SSL CA"' specifies a name for the starting certificate.

Note that "GeoTrust Global CA" is labeled as a "Builtin Object Token" certificate. May be because it is a self-signed root CA.

2012-12-09, 4458👍, 0💬