How to check SSL certificate expiration date for the certificate in wallet using orapki


In this post I am going to share how to find the certificate expiry information from an oracle wallet.


Locate the location where the wallet files are present

cd $INST_TOP/certs/Apache
ls

cwallet.sso 
ewallet.p12
 

Find DN

applmgr@funebs122:/u01/oracle/apps/inst/certs/Apache> orapki wallet display -wallet ewallet.p12
Oracle PKI Tool : Version 12.1.0.2
Copyright (c) 2004, 2014, Oracle and/or its affiliates. All rights reserved.

Enter wallet password:
Requested Certificates:
User Certificates:
Trusted Certificates:
Subject: CN=xyz EV RSA CA 2018,OU=www.funebs122.lab,O=xxx Inc,C=US <====dn

Export ewallet.p12 to the certificate

applmgr@funebs122:/u01/oracle/apps/inst/certs/Apache> orapki wallet export -wallet ewallet.p12 -dn "CN=xyz EV RSA CA 2018,OU=www.funebs122.lab,O=xxx Inc,C=US" -cert certificate_expiry
Oracle PKI Tool : Version 12.1.0.2
Copyright (c) 2004, 2014, Oracle and/or its affiliates. All rights reserved.

Enter wallet password:

applmgr@funebs122:/u01/oracle/apps/inst/certs/Apache> ls
certificate_expiry <===exported certificate

Check certificate validity


applmgr@funebs122:/u01/oracle/apps/inst/certs/Apache> orapki cert display -cert /u01/oracle/apps/inst/certs/Apache/certificate_expiry -summary
Oracle PKI Tool : Version 12.1.0.2
Copyright (c) 2004, 2014, Oracle and/or its affiliates. All rights reserved.

Subject: CN=xyz EV RSA CA 2018,OU=www.funebs122.lab,O=xxx Inc,C=US
Issuer: CN=xyz EV RSA CA 2018,OU=www.funebs122.lab,O=xxx Inc,C=US
Valid Until: Sat Nov 06 15:22:57 AST 2023 <=== Certificate validity


Please read article on more website security checks How to Conduct a Website Security Check



If you like please follow and comment