This document is a WORK IN PROGRESS.
This is just a quick personal cheat sheet: treat its contents with caution!
🚧 WIP 🚧
$ man update-ca-trust🔥
alternative : https://wiki.gentoo.org/wiki/LibreSSL
The downloaded file, which usually has a .crt or .pem suffix, can be validated through the openssl command. To view certificate information (including the serial number):
To view the thumbprint:
Certificates come in many different file formats, often use inconsistent or incorrect file extensions, and tools might expect inputs in specific formats. Try not to assume too much based purely on the file extension. Start with a tool like less or file to try to figure out what format it's in.
DER format is a binary format meant only for tools to read. It is usually possible to convert it to a PEM format that contains the same information, but as plain text. Some tools only accept PEM, so try converting it:
Once it's in the PEM format, view it:
How to install certificates:
If this cheat sheet has been useful to you, then please consider leaving a star here.