5.x Commercial Certificates Guide

Misc

• Inspect your CSR

openssl req -in <server.csr> -noout -text

• Inspect your certificate

openssl x509 -in <server.crt> -noout -text

• Clear the passphrase of the private key

openssl rsa -in <server.key> -out <server.key.decr>

• Get Jetty keystore password

zmlocalconfig -s -m nokey mailboxd_keystore_password

• Create a CSR via the CLI

sudo /opt/zimbra/bin/zmcertmgr createcsr <self|comm> [-new] [subject] [-subjectAltNames "host1,host2"]

• View deployed certificate via the command line

 sudo /opt/zimbra/bin/zmcertmgr viewdeployedcrt

• Convert the cert format from DER to PEM

openssl x509 -in input.cer -inform DER -out output.cer -outform PEM