A Handy Link for Testing Certificates

Today while troubleshooting a Live Meeting problem for a client I utilized a very helpful website that I used in the past but forgot about.  As the issues appeared to be certificate related I went out to a site I had been too when working with digicert before:  http://www.digicert.com/help/

I popped in the URL for my web conferencing edge and was immediately notified that the certificate didn’t match the name it was supposed.  A quick sanity check brings me to the edge server, where I discover the IP addresses for A/V Edge and Web Conferencing Edge are flip-flopped  (it worked a few months back, but some changes had been made).  Here is what the site returns when testing the access edge at my company:

fullcert

Notice, I put “:5061” after the server name, this is necessary to test certificate based services that aren’t listening on port 443. 

Next for fun, let’s see what happens when the name we enter (or IP in this case) doesn’t match the certificates Subject Name:

bad_sn

This is a handy tool for quick sanity checks and testing your certificates.  Happy testing!

 

*edited 9/10/2009 to make the screen shots easier to read*

Advertisements

About Kevin Peters

My name is Kevin Peters.
This entry was posted in Uncategorized and tagged , , , , , , , , , , . Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s