OpenSSL windows installer - //slproweb.com/products/Win32OpenSSL.html & Win64 OpenSSL
1. Generate Key - openssl genrsa -out PingFederate_private.key 2048
2. Generate CSR - openssl req -new -key PrivateKey.key -out CertRequest.csr
3. Generate Key & CSR with .conf file - openssl req -newkey rsa:2048 -nodes -keyout private_sans.key -out certrequest_sans.csr -config MySans.conf
4. Generate PKCS file - openssl pkcs12 -export -certpbe PBE-SHA1-3DES -keypbe PBE-SHA1-3DES -nomac -inkey PrivateKey.key -in SignedCert.crt -certfile RootCA cert -certfile Intermittent.crt -out pkcsfile.p12 -password pass:password
1. Certs Validation-
Verify cert file - openssl x509 -in certificate.crt -text
verify .p12 file - openssl pkcs12 -info -in certificate.p12
Check the private key - openssl rsa -in server.key -check
Check a CSR - openssl req -text -noout -verify -in server.csr
check MD5-
openssl req -noout -modulus -in mycsr.csr | openssl md5
openssl rsa -noout -modulus -in server.key| openssl md5
openssl x509 -noout -modulus -in server.crt| openssl md5