Use OpenSSL to determine TLS certificate expiration date

benjaminblack profile image Benjamin Black Updated on ・1 min read

My posts are usually notes and reference materials for myself, which I publish here with the hope that others might find them useful.

There really should be an s_client option to do this. In lieu of, use s_client to read the cert and pipe it to the x509 command.

echo | openssl s_client -connect example.com:443 -servername example.com 2>/dev/null | openssl x509 -noout -dates
Enter fullscreen mode Exit fullscreen mode


Editor guide