# Ssl 인증서 만료일 점검

**URL:** <https://discourse.ubuntu-kr.org/t/ssl/25510>\
**Category:** 자유 게시판\
**Tags:** 팁\_공유\
**Created:** [3월 25, 2022, 10:31오전 UTC](https://discourse.ubuntu-kr.org/t/ssl/25510 "2022-03-25T10:31:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![soyeomul](https://discourse.ubuntu-kr.org/user_avatar/discourse.ubuntu-kr.org/soyeomul/32/49_2.png) [@soyeomul](https://discourse.ubuntu-kr.org/u/soyeomul)\
**Post date:** [3월 25, 2022, 10:31오전 UTC](https://discourse.ubuntu-kr.org/t/ssl/25510/1 "2022-03-25T10:31:47Z")

</div>

```plaintext
soyeomul@penguin:~$ openssl s_client -connect www.kernel.org:443 -servername www.kernel.org 2> /dev/null | openssl x50
9 -noout -dates
notBefore=Mar 21 18:34:19 2022 GMT
notAfter=Jun 19 18:34:18 2022 GMT

soyeomul@penguin:~$

```

# 참고문헌:

[https://learn.akamai.com/en-us/webhelp/enterprise-application-access/enterprise-application-access/GUID-9D88336D-2733-4325-913C-916403E03D48.html](https://learn.akamai.com/en-us/webhelp/enterprise-application-access/enterprise-application-access/GUID-9D88336D-2733-4325-913C-916403E03D48.html)

[크롬북에서 적었어요~]

---

<div class="post-metadata">

**Author:** ![soyeomul](https://discourse.ubuntu-kr.org/user_avatar/discourse.ubuntu-kr.org/soyeomul/32/49_2.png) [@soyeomul](https://discourse.ubuntu-kr.org/u/soyeomul)\
**Post date:** [3월 25, 2022, 11:22오전 UTC](https://discourse.ubuntu-kr.org/t/ssl/25510/2 "2022-03-25T11:22:04Z")

</div>

메일서버에 설정된 SSL 인증서 점검은 다음을 참고합니다:

[https://www.checktls.com/TestReceiver](https://www.checktls.com/TestReceiver)

위 사이트는 메일서버 (port 25, INGRESS) 를  
점검해줍니다. 특히 SSL 인증서가 적합하게 설정되었는가를  
면밀히 살펴봐줍니다.

[user@domain.tld](mailto:user@domain.tld) 라는 메일주소가 있다치면  
domain.tld 를 eMail Target 에 입력하고 엔타 치면  
해당 도메인의 MX 를 다 찾아서 점검해줍니다.

특정 SMTP 서버의 FQDN 을 직접 입력하셔도 됩니다.  
그럼 그 FQDN 에 해당하는 서버의 25번 포트로 바로 접근하여  
보고서를 만들어줍니다.

위의 서비스를 활용하셔도 **SSL 인증서 만료일** 을 알 수 있습니다.

[크롬북에서 적었어요~]

---

<div class="post-metadata">

**Author:** ![soyeomul](https://discourse.ubuntu-kr.org/user_avatar/discourse.ubuntu-kr.org/soyeomul/32/49_2.png) [@soyeomul](https://discourse.ubuntu-kr.org/u/soyeomul)\
**Post date:** [5월 18, 2022, 2:37오전 UTC](https://discourse.ubuntu-kr.org/t/ssl/25510/3 "2022-05-18T02:37:50Z")

</div>

소스코드: [https://gitlab.com/soyeomul/Gnus/-/raw/master/DKIM/ct.py](https://gitlab.com/soyeomul/Gnus/-/raw/master/DKIM/ct.py)

간단하게 필요하여 스크립트로 만들어봤습니다.

> [@test](#):
>
> soyeomul@penguin:~/gitlab/karma/Gnus/DKIM$ ./ct.py yw-0919.doraji.xyz  
> depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1  
> verify return:1  
> depth=1 C = US, O = Let’s Encrypt, CN = R3  
> verify return:1  
> depth=0 CN = yw-0919.doraji.xyz  
> verify return:1  
> 250 SMTPUTF8  
> DONE  
> **notBefore=Mar 25 09:46:26 2022 GMT**  
> **notAfter=Jun 23 09:46:25 2022 GMT**  
> ^^^  
> posttls-finger: yw-0919.doraji.xyz[64:ff9b::23c5:21f3]:25: Matched subjectAltName: yw-0919.doraji.xyz  
> posttls-finger: yw-0919.doraji.xyz[64:ff9b::23c5:21f3]:25 CommonName yw-0919.doraji.xyz  
> posttls-finger: yw-0919.doraji.xyz[64:ff9b::23c5:21f3]:25: subject\_CN=yw-0919.doraji.xyz, issuer\_CN=R3, fingerprint=D9:84:5C:8B:37:B8:24:FE:8E:A4:E6:69:F0:E3:A0:A8:08:C7:39:52:31:60:44:7E:F4:01:52:AC:FE:FD:93:8D, pkey\_fingerprint=13:A6:5E:1F:40:26:ED:E9:44:B6:3E:52🇩🇪71:07:31:BF🇩🇪BE:72:92:B5:C1:D3:37:14:1E:3F:D6:B2:69:80  
> posttls-finger: Verified TLS connection established to yw-0919.doraji.xyz[64:ff9b::23c5:21f3]:25: TLSv1.3 with cipher TLS\_AES\_256\_GCM\_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256  
> soyeomul@penguin:~/gitlab/karma/Gnus/DKIM$

위 예시에서 보는것처럼 보증서 시작날짜와 만료날짜를 알 수 있습니다.  
posttls-finger 는 postfix 를 설치하면 자동으로 따라옵니다.

[데비안 11 이맥스에서 적었어요~]