From 00d5970f8bc1f9c2bbb960a353e4cc5670100489 Mon Sep 17 00:00:00 2001
From: "W. Trevor King" <wking@tremily.us>
Date: Sat, 12 May 2012 14:23:51 -0400
Subject: [PATCH] Mention how to download certificates using openssl s_client
 in X.509.

---
 posts/X.509_certificates.mdwn | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/posts/X.509_certificates.mdwn b/posts/X.509_certificates.mdwn
index 9ef76b2..0516209 100644
--- a/posts/X.509_certificates.mdwn
+++ b/posts/X.509_certificates.mdwn
@@ -101,6 +101,16 @@ between `-----BEGIN CERTIFICATE-----` and `-----END CERTIFICATE-----`.
 The `.crt` files requested by `update-ca-certificates` (discussed
 below) are generally binary DER files, but can also be base64 encoded.
 
+Downloading certificates
+========================
+
+You can download certificates from remote servers using [[OpenSSL's
+simple client|Simple_servers]]:
+
+    $ openssl s_client -showcerts -connect host:port
+
+The PEM certificates will be printed to your terminal.
+
 System wide certificates
 ========================
 
-- 
2.26.2