🔐 OpenSSL Helper

A comprehensive reference guide for common OpenSSL commands used in SSL/TLS certificate management, key generation, and encryption tasks. Search for commands by keyword to find exactly what you need.

25 commands available

💡 Tip: Try searching for keywords like "csr", "key", "pem", "verify", "convert", "encrypt", or "self-signed" to find relevant commands.

Generate CSR + RSA Key (2048-bit) openssl req -new -newkey rsa:2048 -nodes -keyout key.pem -out req.csr

Generate RSA Key Only (2048-bit) openssl genrsa -out key.pem 2048

Generate 4096-bit RSA Key openssl genrsa -out key.pem 4096

Generate EC Private Key (P-256) openssl ecparam -genkey -name prime256v1 -out ec.key

Generate CSR with Existing Key openssl req -new -key key.pem -out req.csr

View Certificate Details (PEM) openssl x509 -in cert.pem -text -noout

Decode CSR Details openssl req -in req.csr -noout -text

Show Certificate Fingerprint (SHA-256) openssl x509 -in cert.pem -noout -fingerprint -sha256

Show Certificate Serial Number openssl x509 -in cert.pem -noout -serial

Check Certificate Expiration Date openssl x509 -enddate -noout -in cert.pem

Show Certificate Issuer openssl x509 -in cert.pem -noout -issuer

Check Key Matches Certificate openssl rsa -noout -modulus -in priv.key | openssl md5

Compare CSR and Key Modulus openssl req -noout -modulus -in req.csr | openssl md5

Compare Certificate and Key Modulus openssl x509 -noout -modulus -in cert.pem | openssl md5

Extract Public Key from Certificate openssl x509 -in cert.pem -pubkey -noout

Convert PEM to DER Format openssl x509 -in cert.pem -outform der -out cert.der

Convert DER to PEM Format openssl x509 -in cert.der -inform der -out cert.pem

Convert PEM to PKCS#12 (.pfx) openssl pkcs12 -export -out cert.pfx -inkey key.pem -in cert.pem

Convert PKCS#12 (.pfx) to PEM openssl pkcs12 -in file.pfx -out file.pem -nodes

Convert PEM to PKCS#8 (unencrypted) openssl pkcs8 -topk8 -inform PEM -outform PEM -in key.pem -out pkcs8.key -nocrypt

Verify Certificate with CA openssl verify -CAfile ca.pem cert.pem

Test SSL Connection (s_client) openssl s_client -connect google.com:443

Bundle Certificate + Chain cat cert.pem chain.pem > fullchain.pem

Create Self-Signed Certificate (365 days) openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout key.pem -out cert.pem

Encrypt File with AES-256-CBC openssl enc -aes-256-cbc -salt -in file.txt -out file.enc

Decrypt File openssl enc -aes-256-cbc -d -in file.enc -out file.txt

Generate Random Password (32 bytes, Base64) openssl rand -base64 32