{"id":275,"date":"2021-10-13T11:22:49","date_gmt":"2021-10-13T09:22:49","guid":{"rendered":"https:\/\/collabeer.com\/?p=275"},"modified":"2021-10-19T07:54:42","modified_gmt":"2021-10-19T05:54:42","slug":"275","status":"publish","type":"post","link":"https:\/\/collabeer.com\/?p=275","title":{"rendered":"Check validity of a certificate"},"content":{"rendered":"\n<p>If you have a certificate and want to verify its validity:<\/p>\n\n\n\n<p>certutil -f \u2013urlfetch -verify certificate.cer<\/p>\n\n\n\n<p>Example output:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"339\" src=\"https:\/\/collabeer.com\/wp-content\/uploads\/2021\/10\/image-1024x339.png\" alt=\"\" class=\"wp-image-276\" srcset=\"https:\/\/collabeer.com\/wp-content\/uploads\/2021\/10\/image-1024x339.png 1024w, https:\/\/collabeer.com\/wp-content\/uploads\/2021\/10\/image-300x99.png 300w, https:\/\/collabeer.com\/wp-content\/uploads\/2021\/10\/image-768x254.png 768w, https:\/\/collabeer.com\/wp-content\/uploads\/2021\/10\/image.png 1196w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>In this example there is something wrong with the CRL in the domain and CRL Admin need to check whats going on.<\/p>\n\n\n\n<p>With the split command you can download a CRL<\/p>\n\n\n\n<p>certutil \u2013split -URL &lt;http\/ldap&gt;<\/p>\n\n\n\n<p>Example:<\/p>\n\n\n\n<p>certutil -split -URL ldap:\/\/\/CN=,CN=,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=domain,DC=local?certificateRevocationList?base?objectClass=cRLDistributionPoint<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>Her is a useful link for further troubleshooting<\/p>\n\n\n\n<p><a href=\"https:\/\/techcommunity.microsoft.com\/t5\/core-infrastructure-and-security\/basic-crl-checking-with-certutil\/ba-p\/1128367\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/techcommunity.microsoft.com\/t5\/core-infrastructure-and-security\/basic-crl-checking-with-certutil\/ba-p\/1128367<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>If you have a certificate and want to verify its validity: certutil -f \u2013urlfetch -verify certificate.cer Example output: In this example there is something wrong with the CRL in the domain and CRL Admin need to check whats going on. With the split command you can download a CRL certutil \u2013split -URL &lt;http\/ldap&gt; Example: certutil [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-275","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/collabeer.com\/index.php?rest_route=\/wp\/v2\/posts\/275","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/collabeer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/collabeer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/collabeer.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/collabeer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=275"}],"version-history":[{"count":5,"href":"https:\/\/collabeer.com\/index.php?rest_route=\/wp\/v2\/posts\/275\/revisions"}],"predecessor-version":[{"id":283,"href":"https:\/\/collabeer.com\/index.php?rest_route=\/wp\/v2\/posts\/275\/revisions\/283"}],"wp:attachment":[{"href":"https:\/\/collabeer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=275"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/collabeer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=275"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/collabeer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=275"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}