22

I have a certificate and/or private key file (pfx) on my OS X desktop. I'd like to look at its information (CN, SAN, OU, thumbprint, etc) but when I double click on it, it attempts to install into my Keychain. Once its in there, I can see the info and then delete it.

I would like to know if there is a way to "open" a certificate for viewing without having to install it into your Keychain. Similar to how you can click on the padlock in Safari and see the cert info.

I'd prefer something native to OS X but maybe there are tools out there too?

23

I'm not sure if this was available in the OS you had at the time you wrote your question, but at least with OS X 10.11.6, if you select the .crt file in the Finder and press the spacebar, a Quick Look window will open and you can see all of that info in a nice display. Works for .pfx files too.

  • 1
    This is actually a very useful method! I like it more than the command line version! Thanks! – David Hergert Feb 20 '17 at 16:01
  • 1
    simple and elegant. Thanks for sharing! – LeOn - Han Li May 8 at 14:47
10

via Terminal.app and type something like:

openssl x509 -noout -text -in ~/Desktop/yourcertificate.crt  

Where last parameter is a path your certificate file(you can drag and drop that if you like)

gives us:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Apple Inc., OU=Apple Certification Authority, CN=Apple Root CA
        Validity
            Not Before: May 26 19:16:09 2010 GMT
            Not After : Jul 26 19:16:09 2017 GMT
        Subject: C=US, O=Apple Inc., OU=Apple Certification Authority, CN=Apple Application Integration Certification Authority
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (2048 bit)
......
  • Yea, I thought about openssl... I was hoping to have it be more gui based. Probably could write an Automator script to be able drag/drop the cert into a folder and it would pop open a terminal and run the openssl command you suggested. thanks. – David Hergert Jan 9 '15 at 6:24
2

in addition to Krishen approved answer above about selecting the certificate (.cer, .pem, others) in finder and hitting 'space', you can also right click and select Quick Look . I just tested it on 10.14.1 (Mojave), so this definitely works on current OSX

selecting quick-look for a certificate in finder

1

You can also use KeyStore Explorer, an application to view/create/edit certificate and trust stores, and conversion between them. It's really powerful but might be too much for you.

certificate

distinguished name

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .