How to list all available CA SSL certificates on Ubuntu?

Better Stack Team
Updated on May 4, 2022

To list all available CA SSL certificates run the following lines of code:

 
awk -v cmd='openssl x509 -noout -subject' '
 
/BEGIN/{close(cmd)};{print | cmd}' < /etc/ssl/certs/ca-certificates.crt

This will display the subject of every CA certificate in /etc/ssl/certs/ca-certificates.crt

But beware that you may get an error if SSL servers forget to provide the intermediate certificates. In that case, you can try running the following command to get the list of certificates being sent.

 
openssl s_client -showcerts -connect the-git-server:443

Better Uptime Dashboard

🔭 Want to centralize and monitor your python logs?

Go to Logtail and start your log management in 5 minutes.