How do I export the SSL CA certificate from the HTTPS Web site with OpenSSL?

When we visit HTTPS, for some programs need to provide access to the site's CA certificate, this time clients can access the system website, such as using Tibco Business Workspace 5 HTTP send request activty to visit google API provides the rest service, we need to provide the CA certificate of the Www.googleapis.com website. In general, in two more commonly used way, the first way is to access the site through a browser, and then on the site's address bar to the right of a lock, you can click on this lock to view and import the certificate, this method is only suitable for the kind of Web site can open in the browser (IE), the second way, Also say today will introduce the way, directly with the name of OpenSSL. This article takes a visit to Https://developers.google.com/google-apps/calendar/v3/reference/acl/delete as an example

Step 1. Download the OpenSSL tool from the following Web site, unzip it, then find the bin directory, open the Openssl.exe in the command-line window,

The OpenSSL tool under window can be downloaded from the address below
http://code.google.com/p/openssl-for-windows/downloads/detail?name=openssl-0.9.8k_X64.zip&can=2&q=

Step 2. Enter S_client-showcerts-connect www.googleapis.com:443 in this window

You will see a form similar to the following

Step 3. Copy all of the characters in the cmd window into a temporary file by right-clicking, selecting "Select All" (select All) and clicking the mouse,

This will automatically copy the selected content to the sticker board.

Step 4. Save the contents of the above steps to a file, in the current file form, we will see similar to certificate chain or

BEGIN Certificate Keywords

Step 5 at----Begin CERTIFICATE------and ----END CERTIFICATE------is one of the certificates

Copy ----Begin CERTIFICATE------and----END CERTIFICATE------ to a text file

And according to the name of the certificate, the suffix name can be ". cer", for example, the name of the current certificate, we can ----Begin CERTIFICATE------

Like cn=*.googleapis.com, *.googleapis.com is the name of the certificate. So the current certificate can be named googleapis.com.cer

Step 6. Similar to step 5, you can also copy the other certificates into a single file, and change to a suffix named the current certificate

Name of the +.cer suffix.

Step 7. Open the appropriate certificate, we take googleapis.com.cer as an example, we will see the following certificate information.