วิธีทดสอบ SSL Certificate ด้วย CURL / CLI command line

ดูข้อมูล SSL Certificate ด้วย CURL

curl -w %{certs} https://your-domain.com --silent -o /dev/null

ตรวจสอบรายละเอียดใบรับรองด้วย CURL

curl -v https://example.com 2>&1 | grep -i 'issuer\|subject\|start date\|expire date'

เรียกดู SSL Certificate สำหรับ Windows / Windows Server (ต้องติดตั้ง CURL)

curl -s -o NUL -w "%{certs}" https://example.com | findstr /R "^-----BEGIN CERTIFICATE----- ^[A-Za-z0-9+/=]*$ ^-----END CERTIFICATE-----"

เรียกดู SSL Certificate ด้วย CURL สำหรับ Linux

If you must use only curl and your curl version is 7.88.0 or newer:

curl -s -o /dev/null -w "%{certs}" https://example.com

curl -v https://example.com 2>&1 | grep -i 'issuer\|subject\|start date\|expire date'

เช็ควันหมดอายุ SSL ด้วย CURL

curl -w %{certs} https://www.example.com/ --silent -o /dev/null | grep -Ei "^(start|expire) date:" | head -n 2

returns:

Start Date:2024-01-30 00:00:00 GMT
Expire Date:2025-03-01 23:59:59 GMT

curl https://example.com -vI --stderr - | grep "expire date" | cut -d":" -f 2-

returns:

ตรวจสอบ SSL Version ด้วย CURL

curl --insecure -vvI https://www.example.com 2>&1 | awk 'BEGIN { cert=0 } /^\* SSL connection/ { cert=1 } /^\*/ { if (cert) print }'

Output:

* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: C=US; ST=California; L=Los Angeles; O=Verizon Digital Media Services, Inc.; CN=www.example.org
*  start date: Dec 10 00:00:00 2021 GMT
*  expire date: Dec  9 23:59:59 2022 GMT
*  issuer: C=US; O=DigiCert Inc; CN=DigiCert TLS RSA SHA256 2020 CA1
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* Using Stream ID: 1 (easy handle 0x5588e1f5ae30)
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Connection state changed (MAX_CONCURRENT_STREAMS == 100)!
* Connection #0 to host www.example.com left intact

วิธีอื่นๆ

• openssl s_client -showcerts -connect your-domain.com:443

• https://www.ireallyhost.com/kb/ssl/385
• https://serverfault.com/questions/661978/