Opening summary This PKI Weekly Watch reviews still-relevant OpenSSL security fixes from June 2026 the release of OpenSSL 4.0.1, which patches seven security vulnerabilities discovered in recent months. These issues range from heap buffer over-reads to memory corruption and affect multiple OpenSSL … [Read more...] about PKI Weekly Watch: OpenSSL Security Fixes to Review
EV Certificates – Extended Validation Certificates
Question: What are EV Certificates? Answer: Extended Validation (EV) Certificates are SSL Certificates that are issued after a rigorous validation process. The cryptographic strength and security of an EV certificate is no different than that of a DV (Domain Validated) or OV (Organization … [Read more...] about EV Certificates – Extended Validation Certificates
Mount a Windows Share on Linux with CIFS (RHEL, Rocky, Ubuntu)
Mounting a Windows share on Linux is a common task in mixed Windows and Linux environments. Whether you are moving files between systems, giving an application access to a shared folder, or standardizing storage access across servers, the usual approach is to mount the Windows shared folder on Linux … [Read more...] about Mount a Windows Share on Linux with CIFS (RHEL, Rocky, Ubuntu)
OpenSSL Verify: Certificate, Chain, CRL, and Key Examples
Use the openssl verify command to verify a certificate chain, certificate, CRL, and matching key pairs. If you work with TLS certificates, private keys, intermediate certificates, and trust chains, understanding how to use OpenSSL to verify certificates is one of the most useful troubleshooting … [Read more...] about OpenSSL Verify: Certificate, Chain, CRL, and Key Examples
openssl s_client commands and examples
The s_client command from OpenSSL is a helpful test client for troubleshooting remote SSL or TLS connections as well as check whether a certificate is valid, trusted, and has a complete certificate chain. The post strives to walk you through various examples of testing SSL connections with different … [Read more...] about openssl s_client commands and examples
How to Install Keytool on Windows, Ubuntu, RHEL, and Rocky Linux
The Java keytool is a command line utility provided with Java, and this article will guide you through the process of how to install keytool on both Windows and Linux. Keytool is used to manage keystores, symmetric and asymmetric keys, and certificates. Many applications and application servers use … [Read more...] about How to Install Keytool on Windows, Ubuntu, RHEL, and Rocky Linux
keytool -list: Use keytool to List Certificates and in a Java Keystore
The keytool list ( keytool -list ) command displays the contents of a Java keystore. It is used to inspect certificates stored in JKS or PKCS12 files and verify: If you are managing HTTPS in Java, importing a certificate, renewing a certificate, or debugging a TLS issue, keytool -list is … [Read more...] about keytool -list: Use keytool to List Certificates and in a Java Keystore
Convert PEM to other formats
Before covering how to convert to pem from different certificate formats let us define what each of the certificate file extensions means. .pem - Privacy Enhanced Mail Certificate. A PEM file is Base64 encoded and may be an X.509 certificate file, a private key file, or any other key material. … [Read more...] about Convert PEM to other formats