Re: [Openvpn-users] expiry date CA

[Davide B. <da...@gm...>]

On Thu, 30 Jan 2014 14:00:26 +0000, Bonno Bloksma <b.b...@ti...> wrote:

> Hi,
> 
> I want to find out when my CA expires, how do I do that. I cannot see any
> readable info by just looking at the ca.key or the ca.crt Which command
> will let me see that info? Which command will let me see when the client
> certs expire?

An easy way is to just dump the certificate:

openssl x509 -in ca.crt -dates -noout

should give you the info.

You can run the same command on any SSL certificate, including client certs.

Use "-text" instead of "-dates" to show all available information.

-- 
D.