X.509 Certificate Decoder
OpenSSL Commands
# View certificate details
openssl x509 -in cert.pem -text -noout
# Check certificate expiry
openssl x509 -in cert.pem -noout -dates
# Get certificate from server
echo | openssl s_client -connect example.com:443 2>/dev/null | openssl x509 -text
# Verify certificate chain
openssl verify -CAfile ca-bundle.crt cert.pem
X.509 Field Reference
| Field | Description |
|---|---|
| CN (Common Name) | Domain or entity name |
| SAN | Subject Alternative Names โ additional domains |
| O (Organization) | Organization name |
| Issuer | Certificate Authority that issued the cert |
| Not Before/After | Validity period |
| Serial Number | Unique identifier from CA |