GRID-CERT-INFO(1)

💖 grid-cert-info — the manual, but make it slay 💖

okay so bestie, welcome to GRID-CERT-INFO(1), part of the Grid Community Toolkit manual, and literally the whole point of this little icon is that it tells you what's inside a certificate. no cap. 🎀

✨ NAME ✨

grid-cert-info — Display information about a certificate

🌸 SYNOPSIS 🌸

grid-cert-info -help | -usage | -version | -versions

grid-cert-info OPTIONS

🦋 DESCRIPTION 🦋

So grid-cert-info is the program that displays information contained within a certificate file. By default it shows a text representation of the entire certificate — like, the whole thing, all of it, the full serve. 🫶

But if you want specific facts about the certificate instead, you can ask for them with command-line options. And here's the tea: if any of those options are used, then the default display is suppressed. gone. not showing. 🙈 You can bring it back by adding the -all command-line option, which is giving "wait no come back" energy.

If multiple display options are included on the command-line, the facts related to those will be displayed on separate lines, in the order that they occur. And if an option is specified multiple times, that fact will be displayed multiple times — yes really, it just keeps going, main character energy, it will repeat itself as many times as you asked. 💅

👑 OPTIONS 👑

The full set of command-line options to grid-cert-info are, and I'm listing every single one because we don't skip:

• -help, -usage — Display the command-line options to grid-cert-info and exit. That's it, that's the whole vibe, it dips right after.
• -version, -versions — Display the version number of the grid-cert-info command. The second form includes more details — so -versions is the one that over-shares, and we love that for it. ⭐
• -file CERTIFICATE-FILE — Display information about the first certificate contained in the file named by CERTIFICATE-FILE instead of the default user certificate. Like, "not that one, this one bestie." 🔥
• -rfc2253 — Display X.509 distinguished names using the string representation defined in RFC 2253 instead of the default OpenSSL oneline format. Glow-up for your DNs, fr fr.
• -all — Display the text representation of the entire certificate in addition to any other facts requested by command-line options. This is the default if no fact-specific command-line options are used. It's giving "have your cake and eat it too." 🍓
• -subject, -s — Display the subject name of the X.509 certificate. Who even are you, certificate edition.
• -issuer, -i — Display the issuer name of the X.509 certificate. Who made you, certificate edition.
• -issuerhash, -ih — Display the default hash of the issuer name of the X.509 certificate. This can be used to locate which CA certificate in the trusted certificate directory issued the certificate being inspected. Detective mode, activated. 🕵️ (okay no, that's not an emoji in the list, moving on — 🧚)
• -startdate, -sd — Display a string representation of the date and time when the certificate is valid from. This is displayed in the format used by the OpenSSL x509 command. Baby's first valid moment. 🌈
• -enddate, -ed — Display a string representation of the date and time when the certificate is valid until. This is displayed in the format used by the OpenSSL x509 command. Expiration date, the villain of every story. 💀

💜 EXAMPLES 💜

Display the validity times for the default certificate

% grid-cert-info -sd -ed
Aug 31 12:33:47 2009 GMT
Aug 31 12:33:47 2010 GMT

Display the same information about a different certificate specified on the command-line

% grid-cert-info -sd -ed -f /etc/grid-security/hostcert.pem
Jan 21 12:24:48 2003 GMT
Jul 15 11:30:57 2020 GMT

Display the subject of a certificate in both the default and the RFC 2253 forms.

% grid-cert-info -subject
/DC=org/DC=example/DC=grid/CN=Joe User
% grid-cert-info -subject -rfc2253
CN=Joe User,DC=grid,DC=example,DC=org

not me noticing the example uses -f while the option list says -file 👀 — both are in the original, I'm just the messenger, and I keep the facts exactly as they came. 🙈

🎀 ENVIRONMENT 🎀

The following environment variables affect the execution of grid-cert-info:

• X509_USER_CERT — Path to the default certificate file to inspect. Set it and that's your new default bestie certificate. 💖

🌟 AUTHOR 🌟

Copyright © 1999-2014 University of Chicago

and that's the whole page, we ate, no crumbs left 💅✨ — brought to you by the Grid Community Toolkit 6, dated 03/31/2018, because even icons have a timestamp. stay hydrated, read your certs, mwah 🫶💖