openssl x509 -in cert.pem -noout -fingerprint -sha256

Category: Security & Hardening

openssl x509 -in cert.pem -noout -fingerprint -sha256

Print a certificate's SHA-256 fingerprint

Computes the certificate's SHA-256 digest, the short identifier used to verify a cert over the phone or in security advisories. Compare the output with the fingerprint published by the certificate owner. Use -dates or -subject to inspect other fields.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.