Forum Discussion

Senthil_7991's avatar
Senthil_7991
Icon for Nimbostratus rankNimbostratus
Apr 06, 2017

SSL Certificate Validation Test tmsh

Hi Team,

 

We would like to know how to test SSL certificate validation date through "tmsh".

 

When we check with our LTM through GUI is showing like "Valid end of March 2017" but the same URL when we test from externally is showing like March 2020, we don't understand how come showing without expired date.

 

The current assigned certificate is already expired as per F5 but don't know how come mismatch externally.

 

Please assist us

 

Thank you

 

LTM
security
  • Simon_Waters_13's avatar
    Simon_Waters_13
    Icon for Cirrostratus rankCirrostratus
    Apr 06, 2017

    The March 2020 reference sounds like a CA certificate.

     

    You aren't just picking the first certificate in the list, as most browsers show this as the chain of trust

     

    CA -> Intermediate -> Client Certificate

     

    And they all have to be in date, and otherwise valid. So you have to check expiry date on the last one (you can usually trust the CAs to keep theirs valid).