Self-service certificate information from command line using SSH

[ManiBhushan]

Hi

My RSA self-service certificating is expiring ,   I know from RSA Operational Console , we can view the expiry date. 

But I would also like to know the other way using command using SSH , to view the Certificate Information.

Thank you

Mani

[EdwardDavis · Accepted solution]

example: if Self Service IP is 10.101.99.150....

openssl s_client -connect 10.101.99.150:7004 2>/dev/null | openssl x509 -noout -text

[SrirangaPrasan1 · Accepted solution]

Alternatively you can check for certificates directly from the java key store too.

cd to /opt/rsa/am/server/security and run command  ls -l *.jks

Run command - ../../appserver/jdk/jre/bin/keytool -list -keystore webserver-identity.jks -v to display certificates in the webserver keystore.

When you run this command it would prompt for a password and you can just use"enter" key and no password is required.