CSR and private keys
A certificate signing request contains identity information and a public key. The associated private key must remain private and should be stored with restrictive permissions.
DevOps
SSL/OpenSSL Toolkit
Generate certificate and inspection commands.
Command
OpenSSL command reference
Generate common certificate and TLS inspection commands while keeping certificate details and hostnames under your control. Review filenames and options before running commands on production systems.
Inspect a certificate
OpenSSL can display certificate subjects, issuers, validity dates and extensions. This is useful when confirming which certificate is installed or diagnosing an expiration problem.
Test a TLS endpoint
The s_client command can inspect a remote TLS handshake and certificate chain. Use the expected hostname with SNI when testing virtual hosts.