SyntaxFix

[sha1] Check if my SSL Certificate is SHA1 or SHA2

Use the Linux Command Line

Use the command line, as described in this related question: How do I check if my SSL Certificate is SHA1 or SHA2 on the commandline.

Command

Here's the command. Replace www.yoursite.com:443 to fit your needs. Default SSL port is 443:

openssl s_client -connect www.yoursite.com:443 < /dev/null 2>/dev/null \
    | openssl x509 -text -in /dev/stdin | grep "Signature Algorithm"

Results

This should return something like this for the sha1:

Signature Algorithm: sha1WithRSAEncryption

or this for the newer version:

Signature Algorithm: sha256WithRSAEncryption

References

The article Why Google is Hurrying the Web to Kill SHA-1 describes exactly what you would expect and has a pretty graphic, too.

Examples related to sha1

• How to add SHA-1 to android application • Check if my SSL Certificate is SHA1 or SHA2 • Hashing a file in Python • Is it possible to decrypt SHA1 • Hashing with SHA1 Algorithm in C# • Simple (non-secure) hash function for JavaScript? • How to SHA1 hash a string in Android? • Java String to SHA1 • Is calculating an MD5 hash less CPU intensive than SHA family functions? • SHA1 vs md5 vs SHA256: which to use for a PHP login?

Examples related to sha2

• Check if my SSL Certificate is SHA1 or SHA2 • Are there any SHA-256 javascript implementations that are generally considered trustworthy? • Is calculating an MD5 hash less CPU intensive than SHA family functions?