OPENSSL-NSEQ(1ossl)

💅 openssl-nseq — the OpenSSL one (1ossl) 🎀

okay so bestie, gather round, because today we're talking about openssl-nseq, aka the glow-up tool that creates or examines a Netscape certificate sequence. yes, that's a whole thing. 🦋

---

✨ SYNOPSIS ✨

openssl nseq [-help] [-in filename] [-out filename] [-toseq] [-provider
name] [-provider-path path] [-provparam [name:]key=value] [-propquery
propq]

that's the whole vibe check right there, no cap. 🔥

---

🌸 DESCRIPTION 🌸

so the way this works is iconic: this command takes a file that's holding a Netscape certificate sequence and prints out all the certificates chillin' inside it — or it does the reverse and takes a file full of certificates and converts them into a Netscape certificate sequence. two directions, one tool, main character energy fr fr. 💅

now, a Netscape certificate sequence is this old Netscape-specific format. like, old old. and here's the thing — it can sometimes be sent to browsers as an alternative to the standard PKCS#7 format when you're sending several certificates to the browser, for example during certificate enrollment. it was also used by the Netscape certificate server. so yeah, it's giving vintage. 🎀

---

👑 OPTIONS 👑

• -help — prints out a usage message. that's it, that's the whole job. 😌
• -in filename — this specifies the input filename to read. if you don't specify this option, it just reads from standard input. lowkey convenient. 🫶
• -out filename — specifies the output filename — or standard output by default. 🌈
• -toseq — okay so normally a Netscape certificate sequence is the input and the output is the certificates contained in it. with the -toseq option the situation is reversed: a Netscape certificate sequence is created from a file of certificates. it flips the whole script, literally. 🙈
• -provider name
• -provider-path path
• -provparam [name:]key=value
• -propquery propq — for this whole provider group, see "Provider Options" in openssl(1), provider(7), and property(7). iykyk 💜

---

⭐ EXAMPLES ⭐

🍓 Output the certificates in a Netscape certificate sequence

openssl nseq -in nseq.pem -out certs.pem

🧚 Create a Netscape certificate sequence

openssl nseq -in certs.pem -toseq -out nseq.pem

see? same tool, opposite directions. ate. 💖

---

💀 COPYRIGHT 💀

Copyright 2000-2020 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

bestie please actually read the license, don't just scroll past it 😭

---

and that's the whole page! this was version 3.5.6, dated 2026-04-07, brought to you by the OpenSSL squad — now go forth and sequence your certificates, you absolute icon. 🌟👑