Please go to official download OpenSSL
https://www.openssl.org/source/
Download to local and unzip and place the certificate you want to view in the OpenSSL directory
Open Command Window
For specific commands, refer to the following:
One-to-verify if "Keytool" did the export my certificate using DER and PEM formats correctly or not was to use "OpenSSL" to View those certificate files. To does this, I used the "OpenSSL x509" command to view Keytool_crt.der and KEYTOOL_CRT.PEM:
>openssl x509-in keytool_crt.pem-inform pem-noout-textcertificate: Data: version:3 (0x2) Serial number:1185636568 (0X46AB60D8) Signature algorithm:dsawithsha1 issuer:c=ca, St=herong State, L=herong City,.. . ... >openssl x509-in keytool_crt.der-inform der-noout-textcertificate: Data: version:3 (0x2) Serial number:1185636568 (0X46AB60D8) Signature algorithm:dsawithsha1 issuer:c=ca, St=herong State, L=herong City, ... O=herong Company, Ou=heron ...
Cool. "OpenSSL" can read certificates in DER and PEM formats generated by "Keytool". What I learned so far:
- "Keytool" can generate self-signed X5.09 version 3 certificates.
- "Keytool" can export certificates with DER and PEM formats.
- "OpenSSL" can read certificates generated by "Keytool" in both DER and PEM formats.
Viewing a certificate using OpenSSL is der and PEM (BASE64) encoded