Which Sub CA cert goes with which Root CA cert? (openssl)

Posted on 2009-12-29
Last Modified: 2013-11-16

how can I find out which Sub CA cert goes with which Root CA cert?

Question by:php-newbie
    LVL 5

    Expert Comment

    When you open the subCA certificate, navigate to the "Certification Path" tab and you will see which root CA issued that subcertificate.
    LVL 31

    Accepted Solution

    openssl x509 -in yourcert.cer -text

    This is similar to certutil -dump command.  the Subject field will be the site issued for this cert, the Issuer field will be the name of the CA that issue the cert.

    More specifically to the issuer, you can do this:
    openssl x509 -in yourcert.cer -issuer

    Look above the certificate blob and you will see the issuer.  The blob is the server's cert, not the issuers.

    Note sure if this is useful or not, but if you are trying to script finding the file in a directory, you probably want this for checking:
    openssl x509 -in yourcert.cer -issuer_hash
    openssl x509 -in scriptvariable.cer -subject_hash

    and compare the first output line, you could use - as a delimiter.


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    A few customers have recently asked my thoughts on Password Managers.  As Security is a big part of our industry I was initially very hesitant and sceptical about giving a program all of my secret passwords.  But as I was getting asked about them mo…
    Healthcare providers, insurance companies and other covered entities trust eFax Corporate to transmit their most sensitive documents. eFax Corporate can help your organization implement a HIPAA compliant cloud faxing solution.
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    758 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now