check-certificate(1)

NAME
check-certificate - Checks and verifies X.509 certificates in PEM format

SYNOPSIS
check-certificate ca_certificate_file certificate_file [...]
[-C crl_file | - -crl crl_file]
[-n | - -no-view-certificate]
check-certificate [-h | - -help]

DESCRIPTION
check-certificate verifies X.509 certificates against a Certification Authority (CA) certificate and optionally a Certificate Revocation List (CRL). The verification is made using OpenSSL, and if available GnuTSL and NSS, to ensure the certificates are working properly with all three TLS implementations.

ARGUMENTS
The following options are available:

ca_certificate_file
    Specifies the CA certificate file to verify certificates.

certificate_file [...]
    Specifies one ore more certificate files to be verified.

-C crl_file | - -crl crl_file
    Specifies a CRL file.

-n | - -no-view-certificate
    Do not display a certificate before verification.

-h | - -help
    Prints command-line parameters.

EXAMPLES

check-certificate My-CA-Certificate.crt My-Server-Certificate.crt

check-certificate --crl CRL.crl My-CA-Certificate.crt My-Server-Certificate.crt

check-certificate /usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt www.nntb.no.crt

check-certificate --help

check-certificate -h