Viewing the Active Certificate in our SecurID 3.0 Appliance, I can tell we are using a certificate issued from our internal CA. However, I am not sure if it was issued/signed using SHA-256. Is there a way I can tell this?
You can check by visiting the site in your browser and viewing the certificate that the browser received. The details of how to do that can vary from browser to browser, but generally if you click or right-click on the lock icon, there should be an option to view the certificate details.
In the list of certificate fields, look for one called "Certificate Signature Algorithm".
Alternatively you can also use open_ssl:
Assuming the SSL certificate is stored in a file called example.crt, you can use the following OpenSSL command to display the details of the SSL certificate.
$ openssl x509 -noout -text -in example.crt
Right-clicking the lock gave me the information I need.
The certification was signed using SHA-256.
Retrieving data ...