1GRID-CERT-INFO(1) Globus Commands GRID-CERT-INFO(1)
2
6 grid-cert-info - Display information about a certificate
7
9 grid-cert-info [-help] [-usage] [-version] [-versions]
10 grid-cert-info [-file CERTIFICATE-FILE] [-rfc2253] [-all]
12 [-subject] | [-s]
13 [-issuer] | [-i]
14 [-issuerhash] | [-ih]
15 [-startdate] | [-sd]
16 [-endate] | [-ed]
17
19 The grid-cert-info program displays information contained within a
20 certificate file. By default it shows a text representation of the
21 entire certificate. Specific facts about the certificate can be shown
22 instead by using command-line options. If any of those options are
23 used, then the default display is suppressed. This can be added to the
24 output by using the -all command-line option.
25 If multiple display options are included on the command-line, the facts
27 related to those will be displayed on separate lines in the order that
28 they occur. If an option is specified multiple time, that fact will be
29 displayed multiple times.
30 The full set of command-line options to grid-cert-info are:
32 -help, -usage
34 Display the command-line options to grid-cert-info and exit.
35 -version, -versions
37 Display the version number of the grid-cert-info command. The
38 second form includes more details.
39 -file CERTIFICATE-FILE
41 Display information about the first certificate contained in the
42 file named by CERTIFICATE-FILE instead of the default user
43 certificate.
44 -rfc2253
46 Display X.509 distinguished names using the string representation
47 defined in RFC 2253 instead of the default OpenSSL oneline format.
48 -all
50 Display the text representation of the entire certificate in
51 addition to any other facts requested by command-line options. This
52 is the default if no fact-specific command-line options are used.
53 -subject, -s
55 Display the subject name of the X.509 certificate.
56 -issuer, -i
58 Display the issuer name of the X.509 certificate.
59 -issuerhash, -ih
61 Display the default hash of the issuer name of the X.509
62 certificate. This can be used to locate which CA certificate in the
63 trusted certificate directory issued the certifcate being
64 inspected.
65 -startdate, -sd
67 Display a string representation of the date and time when the
68 certificate is valid from. This is displayed in the format used by
69 the OpenSSL x509 command.
70 -enddate, -dd
72 Display a string representation of the date and time when the
73 certificate is valid until. This is displayed in the format used by
74 the OpenSSL x509 command.
75
77 Display the validity times for the default certificate
78 % grid-cert-info -sd -ed
80 Aug 31 12:33:47 2009 GMT
81 Aug 31 12:33:47 2010 GMT
82 Display the same information about a different certificate specified on
84 the command-line
85 % grid-cert-info -sd -ed -f /etc/grid-security/hostcert.pem
87 Jan 21 12:24:48 2003 GMT
88 Jul 15 11:30:57 2020 GMT
89 Display the subject of a certificate in both the default and the RFC
91 2253 forms.
92 % grid-cert-info -subject
94 /DC=org/DC=example/DC=grid/CN=Joe User
95 % grid-cert-info -subject -rfc2253
96 CN=Joe User,DC=grid,DC=example,DC=org
97
100 The following environment variables affect the execution of
101 grid-cert-info:
102 X509_USER_CERT
104 Path to the default certificate file to inspect.
105
107 University of Chicago
108Globus Toolkit 5.0.1 03/22/2010 GRID-CERT-INFO(1)