[Operators] IM Observatory: Not recognising DigiCert root certificate

Robert Norris robn at fastmail.fm
Thu Oct 31 03:38:48 UTC 2013

On Thu, Oct 31, 2013, at 02:31 PM, Peter Saint-Andre wrote:
> I got it here:
> https://www.digicert.com/digicert-root-certificates.htm

Ok, that's the same as me. But its in DER format, whereas s_client is
expecting -CAfile to be PEM. Try:

  $ openssl x509 -in DigiCertHighAssuranceEVRootCA.crt inform DER -out
  DigiCertHighAssuranceEVRootCA.pem -outform PEM

Then use the .pem and see if you get the same result as me.

More information about the Operators mailing list