Which Sub CA cert goes with which Root CA cert? (openssl)

Posted on 2009-12-29
Medium Priority
Last Modified: 2013-11-16

how can I find out which Sub CA cert goes with which Root CA cert?

Question by:php-newbie

Expert Comment

ID: 26141891
When you open the subCA certificate, navigate to the "Certification Path" tab and you will see which root CA issued that subcertificate.
LVL 31

Accepted Solution

Paranormastic earned 2000 total points
ID: 26154239
openssl x509 -in yourcert.cer -text

This is similar to certutil -dump command.  the Subject field will be the site issued for this cert, the Issuer field will be the name of the CA that issue the cert.

More specifically to the issuer, you can do this:
openssl x509 -in yourcert.cer -issuer

Look above the certificate blob and you will see the issuer.  The blob is the server's cert, not the issuers.

Note sure if this is useful or not, but if you are trying to script finding the file in a directory, you probably want this for checking:
openssl x509 -in yourcert.cer -issuer_hash
openssl x509 -in scriptvariable.cer -subject_hash

and compare the first output line, you could use - as a delimiter.


Featured Post

WEBINAR: GDPR Implemented - Tips & Lessons Learned

Join the WatchGuard team on Thursday, March 29th as we recount some valuable lessons learned in weighing the needs of a business against the new regulatory environment, look ahead at the two months left before implementation, and help you understand the steps you can take today!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Curious about the latest ransomware attack? Check out our timeline of events surrounding the spread of this new virus along with tips on how to mitigate the damage.
The recent Petya-like ransomware attack served a big blow to hundreds of banks, corporations and government offices The Acronis blog takes a closer look at this damaging worm to see what’s behind it – and offers up tips on how you can safeguard your…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question