How to dump all certificates from a file?

Viktor Dukhovni openssl-users at
Wed Apr 7 02:36:38 UTC 2021

On Wed, Apr 07, 2021 at 10:14:42AM +0800, Nan Xiao wrote:

> Greetings from me! By default openssl-x509 can only dump one
> certificate from the file:

By "a file" you clearly mean a "PEM file" with one or more certificates
exclosed in "-----BEGIN ...".."-----END ..." delimiters.  With that
proviso, the command in question is:

    openssl crl2pkcs7 -nocrl -certfile somefile.pem |
        opessl pkcs7 -print_certs -text

The output format can be tweaked slightly, though not quite as much as
will "openssl x509".  See the pkcs7(1) manpage for details.


More information about the openssl-users mailing list