Find out when SSL expires from a PEM file.
$ openssl x509 -enddate -noout -in your.cert notAfter=Jan 5 07:08:14 2032 GMT |
notAfter date is returned.
expiration
Check Certificate Expiration
Here’s the openssl command to find out if a cert is expired.
$ openssl s_client -connect yourdomain.com:443 -servername yourdomain.com 2> /dev/null | openssl x509 -noout -dates |
Result
notBefore=Apr 9 00:00:00 2020 GMT notAfter=Apr 9 23:59:59 2022 GMT |
AWS Display IAM Certificates
SSL certificates were uploaded to IAM prior to Certificate Manager. Unfortunately, the certificates are not visible from the IAM console. There’s no way to view when a certificate is expiring. So, here’s how to display IAM certificates from the AWS CLI.
aws iam list-server-certificates |