TLS

Quick certificate and encrypted-session pivots.

Inspect a live certificate

openssl s_client -connect example.com:443 -servername example.com </dev/null

Show certificate subject and issuer

openssl s_client -connect example.com:443 -servername example.com </dev/null 2>/dev/null | openssl x509 -noout -subject -issuer

Show certificate validity dates

openssl s_client -connect example.com:443 -servername example.com </dev/null 2>/dev/null | openssl x509 -noout -dates

Show TLS handshakes in a PCAP

tshark -r capture.pcap -Y tls.handshake

Extract SNI values

tshark -r capture.pcap -Y tls.handshake.extensions_server_name -T fields -e ip.src -e tls.handshake.extensions_server_name