Testing Internal SSL Certificate Installations with the ¶ºÒõ¹Ý Certificate Utility
The Query Server feature can be very helpful for testing your SSL Certificate installation for a certificate that's installed in your Local Area Network but that's not available externally.
How to Display an SSL Certificate Chain Using the ¶ºÒõ¹Ý Utility
-
On your Windows Server, download and save the ¶ºÒõ¹Ý® Certificate Utility for Windows executable (¶ºÒõ¹ÝUtil.exe).
-
Run the ¶ºÒõ¹Ý® Certificate Utility for Windows.
Double-click ¶ºÒõ¹ÝUtil.
-
In the ¶ºÒõ¹Ý Certificate Utility for Windows©, click Tools (wrench and screw driver).
-
On the Tools page, click Check Install.
-
This opens the Certificate Installation Checker page. This page lets you make a connection to the DNS name/IP address/localhost that you enter.
-
On the Certificate Installation Check page, enter the following information:
Server Address:
Enter your server's DNS name, IP address, or localhost of the certificate you are securing.
Port Number:
Enter the port number.
If you are using a nonstandard port number for the SSL traffic/service, you can enter that into the page as well. SSL/TLS Mode:
In the drop-down list, do one of the following:
• Select Auto determine by port number. This option lets our tool auto-select the default port for any of the following services: HTTPS, SMTP, IMAP, or POP3. • Select the service that you are trying to secure. (Direct (such as in HTTPS), SMTP STARTLS command, IMAP STARTTLS command, or POP 3 STLS command) -
When you are finished, click Query Server.
This makes an HTTPS connection between the ¶ºÒõ¹Ý Certificate Utility and the specified server. Our tool then displays the Certificate Chain that the server sends back with some details about each certificate in the chain.
Troubleshooting Tips
¶ºÒõ¹Ý uses a few different chain paths for client computers to trace the certificate issued to 'your.domain.com' up to a trusted root certificate. So if you run into any certificate errors with your clients, first try following the instructions on the ¶ºÒõ¹Ý Certificate Utility: Repair Intermediate SSL Certificate Errors page. If those instructions don't solve the problem for you, please contact ¶ºÒõ¹Ý Support for help. Let them know which certificates the Query Server feature lists, so they'll be able to help you get the problem fixed as quickly as possible.