openssl-nseq1ssl
Create or examine a netscape certificate sequence
Usage
openssl nseq
[-help]
[-in
filename]
[-out
filename]
[-toseq]
[-provider
name]
[-provider-path
path]
[-provparam
[name:]
key=value]
[-propquery
propq]
Overview
This command takes a file containing a Netscape certificate sequence and prints out the certificates contained in it or takes a file of certificates and converts it into a Netscape certificate sequence.
A Netscape certificate sequence is an old Netscape-specific format that can be sometimes be sent to browsers as an alternative to the standard PKCS#7 format when several certificates are sent to the browser, for example during certificate enrollment. It was also used by Netscape certificate server.
Options
-
-help -
Print out a usage message.
-
-in filename -
This specifies the input filename to read or standard input if this option is not specified.
-
-out filename -
Specifies the output filename or standard output by default.
-
-toseq -
Normally a Netscape certificate sequence will be input and the output is the certificates contained in it. With the
-toseqoption the situation is reversed: a Netscape certificate sequence is created from a file of certificates.
-
-provider name
-
-provider-path path
-
-provparam [name:]key=value
-
-propquery propq -
See "Provider Options" in openssl(1), provider(7), and property(7).
Examples
Output the certificates in a Netscape certificate sequence
openssl nseq -in nseq.pem -out certs.pemCreate a Netscape certificate sequence
openssl nseq -in certs.pem -toseq -out nseq.pemReleases
6 releases since Debian 9 (Stretch); the text changed 5 times.
-propquery since Debian 12 (Bookworm);
-provider since Debian 12 (Bookworm);
-provider-path since Debian 12 (Bookworm);
-provparam since Debian 13 (Trixie).