Skip to content

Latest commit

 

History

History
77 lines (57 loc) · 2.23 KB

Get-SSLCertificate.md

File metadata and controls

77 lines (57 loc) · 2.23 KB
Raw

Get-SSLCertificate

Open an SSL connection to the given host and read the presented server certificate.

Parameters

Parameter Set 1

  • [String] ComputerName A hostname or Url of the server to retreive the certificate. Mandatory, ValueFromPipeline
  • [Int32] Port The port to connect to the remote server.
  • [String] OutSslStreamVariable Stores SslStream connetion details from the command in the specified variable.

Examples

Example 1

Return the certificate for google.com.

Get-SSLCertificate google.com
Thumbprint                                Subject              EnhancedKeyUsageList
----------                                -------              --------------------
9B97772CC2C860B0D0663AD3ED34272FF927EDEE  CN=*.google.com      Server Authentication

Example 2

Verify a server certificate. You can use Test-SSLCertificate to validate the entire certificate chain.

$cert = Get-SSLCertificate expired.badssl.com
$cert.Verify()
False

Example 3

Write SslStream connection details to Verbose stream.

$cert = Get-SSLCertificate google.com -verbose
VERBOSE: Converting Uri to host string
VERBOSE: ComputerName = google.com
VERBOSE: Cipher: Aes256 strength 256
VERBOSE: Hash: Sha384 strength 0
VERBOSE: Key exchange: None strength 0
VERBOSE: Protocol: Tls13

Example 4

Stores SslStream connection details in the $sslStreamValue variable.

Get-SSLCertificate -ComputerName 'google.com' -OutSslStreamVariable sslStreamValue
Thumbprint                                Subject              EnhancedKeyUsageList
----------                                -------              --------------------
5D3AD94714B07830A1BFB445F6F581AD0AC77689  CN=*.google.com      Server Authentication
$sslStreamValue
CipherAlgorithm      : Aes256
CipherStrength       : 256
HashAlgorithm        : Sha384
HashStrength         : 0
KeyExchangeAlgorithm : None
KeyExchangeStrength  : 0
SslProtocol          : Tls13

Links

Notes

No validation check done. This command will trust all certificates presented.

Outputs

  • System.Security.Cryptography.X509Certificates.X509Certificate2