A collection of shell scripts that help handling X.509 certificate and TLS issues
Script to check whether a private key belongs to a certificate.
It will check three things:
- Internal consistency of private key.
- Does SPKI SHA256 hash match?
- Can a test signature be verified?
Many existing tools and guides only check whether the public key part of the private key matches and don't really check the private key.
Creates a private key for an existing certificate that looks like a real key if not checked properly.
Requires the der2ascii/ascii2der tools by David Benjamin.
Checks OCSP status of certificates with a single command.
It will automatically extract the issuer certificate and OCSP url via AIA.
Gets all subdomains to a domain by querying the database of the crt.sh Certificate Transparency search engine.
The examples subdirectory contains an existing certificate (from symantec) and a corresponding fake private key.