OPENSSL-NSEQ(1ossl)

💖 NAME 💖

okay bestie, welcome to the OPENSSL-NSEQ(1ossl) manual page — this is all about openssl-nseq, the command that can create or examine a Netscape certificate sequence ✨

🌸 SYNOPSIS 🌸

openssl nseq [-help] [-in filename] [-out filename] [-toseq] [-provider
       name] [-provider-path path] [-provparam [name:]key=value] [-propquery
       propq]

✨ DESCRIPTION ✨

This command has two main-character modes: it takes a file containing a Netscape certificate sequence and prints out the certificates contained in it, or it takes a file of certificates and converts it into a Netscape certificate sequence 💅

Real talk: a Netscape certificate sequence is an old Netscape-specific format that can sometimes be sent to browsers as an alternative to the standard PKCS#7 format when several certificates are sent to the browser — for example, during certificate enrollment. It was also used by Netscape certificate server 🧚

---

💅 OPTIONS 💅

• -help — prints out a usage message, so you can see the flag vibe ✨
• -in filename — tells it which input file to read. If you don’t specify this option, it reads from standard input 🫶
• -out filename — picks the output filename. By default, it goes to standard output 🎀
• -toseq — okay so normally a Netscape certificate sequence is the input, and the output is the certificates contained in it. With -toseq the situation is reversed: a Netscape certificate sequence is created from a file of certificates 🔁
• -provider name — provider-options cluster, bestie. See "Provider Options" in openssl(1), provider(7), and property(7) 💜
• -provider-path path — same provider-options reference: see "Provider Options" in openssl(1), provider(7), and property(7) 💜
• -provparam [name:]key=value — same provider-options reference: see "Provider Options" in openssl(1), provider(7), and property(7) 💜
• -propquery propq — same provider-options reference: see "Provider Options" in openssl(1), provider(7), and property(7) 💜

🦋 EXAMPLES 🦋

Wanna output the certificates in a Netscape certificate sequence? Run this, bestie:

openssl nseq -in nseq.pem -out certs.pem

And when you need to create a Netscape certificate sequence, flip it like this:

openssl nseq -in certs.pem -toseq -out nseq.pem

🎀 COPYRIGHT 🎀

Legal bestie moment, no cap:

Copyright 2000-2020 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

---

mwah 💋 — this page is from OpenSSL 3.5.9, dated 2026-09-29, and it’s the OPENSSL-NSEQ(1ossl) manual. Bye bestie, go examine those certificate sequences 🫶✨