Someday you may need to get the SSL certificate of a website and save it locally.
For example, you could get an error saying that you can't clone a Git repository due to a self-signed certificate and to resolve this issue you would need to download the SSL certificate and make it trusted by your Git client.
In the following article i am showing how to export the SSL certificate from a server (site URL) using Google Chrome, Mozilla Firefox and Internet Explorer browsers as well as how to get SSL certificate from the command line, using openssl
command.
Cool Tip: Create a self-signed SSL Certificate! Read more →
Export SSL Certificate
Cool Tip: Create a self-signed SSL Certificate! Read more →
Export SSL Certificate
Please check if the Root CA where you have request the certificate for the Lync server is also a trusted root ca on your client. It looks like the client didn't trust the certificate from the Lync server. Regards Holger Technical Specialist UC Proposed as answer bySharon.ShenMonday, May 21, 2012 9:21 AM. Change the Certificate Settings to Fix iTunes Can't Verify the Identity of The Server Mac Many Mac users experienced server verifying errors whenever they launch iTunes. Changing the certificate settings is tested works to fix iTunes can't verify the identity of the server but it will bypass the built-in security for trusting unknown. The current workaround is to export the root certificate from one of the domain machine and import it into the laptop/pc thats not a domain member. When you import the cert, you may get an warning about trusting the cert. Just click accept and install anyways. The problem does not occur on client computers that are running Windows 7 and are in the same domain. You must extend the Active Directory schema for the Validate server certificate option if you configure the option in a domain that has Windows Server 2003-based and Windows Server 2008 R2-based domain controllers. This problem cames out when I try to use another pc to login lync for user. Then the message ' There was a problem verifying the certificate from the server.' So, do anyone have a clue to solve this, or could I export the cert from user's computer then import it into this one?
Google Chrome
Export the SSL certificate of a website using Google Chrome:
- Click the
Secure
button (a padlock) in an address bar - Click the
Show certificate
button - Go to the
Details
tab - Click the
Export
button - Specify the name of the file you want to save the SSL certificate to, keep the 'Base64-encoded ASCII, single certificate' format and click the
Save
button
Mozilla Firefox
Https Server Certificate
Export the SSL certificate of a website using Mozilla Firefox:
- Click the
Site Identity
button (a padlock) in an address bar - Click the
Show connection details
arrow - Click the
More Information
button - Click the
View Certificate
button - Go to the
Details
tab - Click the
Export
button - Specify the name of the file you want to save the SSL certificate to, keep the 'X.509 Certificate (PEM)' format and click the
Save
button
Cool Tip: Check the expiration date of the SSL Certificate from the Linux command line! The fastest way! Read more →
Internet Explorer
Download and save the SSL certificate of a website using Internet Explorer:
- Click the
Security report
button (a padlock) in an address bar - Click the
View Certificate
button - Go to the
Details
tab - Click the
Copy to File...
button - Click the
Next
button - Select the 'Base-64 encoded X.509 (.CER)' format and click the
Next
button - Specify the name of the file you want to save the SSL certificate to
- Click the
Next
and theFinish
buttons
OpenSSL
Get the SSL certificate of a website using openssl
command:
Short explanation:
Option | Description |
---|---|
-connect HOST:PORT | The host and port to connect to |
-servername NAME | The TLS SNI (Server Name Indication) extension (website) |
certificate.crt | Save SSL certificate to this file |
Problem Verifying The Certificate From The Server Settings
Example: