chkcerts
chkcerts copied to clipboard
RFE: handling redirections
Some sites may redirect the content to a new site in a different domain, each one of their own certificates. This tool only sees the last site in the redirection chain. It would be good if it could also handle the original website, otherwise it looks confusing.
Example:
$ chkcerts https://commandlineheroes.com
Subject: www.redhat.com
Issuer: DigiCert SHA2 Extended Validation Server CA
(...)
$ curl -v commandlineheroes.com
(...)
< HTTP/1.1 301 Moved Permanently
< Location: https://www.redhat.com/en/command-line-heroes
(...)
$ echo "" | openssl s_client -connect "commandlineheroes.com:443" | openssl x509 -noout -text -enddate
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
depth=1 C = US, O = Let's Encrypt, CN = R3
depth=0 CN = commandlineheroes.com
(...)