SSL CERT Cheatsheet

gistfile1.txt

# Get some info on cert (SAN cert details like DNS, etc..)
nmap --script ssl-cert -p 443 some.com

# Get ciphers available 
nmap --script ssl-enum-ciphers -p 443 some.com

# Get info on cert file
openssl x509 -in some.crt -text -noout

# Verify key matches cert by seeing if modulus matches between the two
openssl x509 -noout -modulus -in some.crt  | openssl md5
openssl rsa  -noout -modulus -in some.key  | openssl md5