From: W. Trevor King <wking@tremily.us>
Date: Sat, 12 May 2012 18:23:51 +0000 (-0400)
Subject: Mention how to download certificates using openssl s_client in X.509.
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=00d5970f8bc1f9c2bbb960a353e4cc5670100489;p=blog.git

Mention how to download certificates using openssl s_client in X.509.
---

diff --git a/posts/X.509_certificates.mdwn b/posts/X.509_certificates.mdwn
index 9ef76b2..0516209 100644
--- a/posts/X.509_certificates.mdwn
+++ b/posts/X.509_certificates.mdwn
@@ -101,6 +101,16 @@ between `-----BEGIN CERTIFICATE-----` and `-----END CERTIFICATE-----`.
 The `.crt` files requested by `update-ca-certificates` (discussed
 below) are generally binary DER files, but can also be base64 encoded.
 
+Downloading certificates
+========================
+
+You can download certificates from remote servers using [[OpenSSL's
+simple client|Simple_servers]]:
+
+    $ openssl s_client -showcerts -connect host:port
+
+The PEM certificates will be printed to your terminal.
+
 System wide certificates
 ========================