How to query the root certificate? Share the root certificate online query method

In the era of HTTPS encrypted network, the root certificate, as the core of the digital trust chain, is the key foundation to ensure the credibility of the website identity and the security of data transmission. Many users will need to query the relevant information of the root certificate when encountering the error of the website certificate and verifying the security of the encrypted connection, but they do not know the specific operation path. This article will share practical root certificate query methods from multiple dimensions such as local systems and online tools, and explain the key skills of root certificate validity verification to help you easily handle the query requirements related to root certificates.

How to query the Windows system root certificate?

Windows system has built-in trusted root certificate repository, daily visits to legitimate websites, the system will automatically call these root certificates to complete the verification, the following are specific query steps.

1, through the certificate manager query

press the Win + R key combination to open the run window, enter certmgr.msc and press Enter to open the certificate manager. In the left navigation bar, expand the trusted root certificate authority - certificate in turn, and the list on the right will display all the built-in root certificates of the system. You can right-click to view the details of the certificate, including the authority, valid period, public key, etc.

2, through the browser query site root certificate

open Edge or Chrome browser, after visiting the target website, click the lock icon on the left side of the address bar, select Certificate - Details - Path in turn, you can see the root certificate level corresponding to the website, click the root certificate name to view its specific information, this method is suitable for querying the root certificate associated with a specific website.

2. How to use the online root certificate query tool?

In addition to local system queries, you can also use professional online tools to query root certificates, which support cross-system use and provide more comprehensive root certificate related information.

1, use SSL Labs query tool

visit SSL Labs Server Test page, enter the target website domain name and click Submit, wait for the detection to be completed, you can view the root certificate information corresponding to the website in the certificate path section, and the tool will give the trust status of the root certificate, whether it is recognized by the browser and other evaluation results to help you judge the legitimacy of the root certificate.

2, use the root certificate authority official website query

well-known root certificate authorities such as DigiCert, GlobalSign, etc., the official website provides the root certificate query entrance, enter the root certificate page of the corresponding official website, you can browse all trusted root certificates by category, and download the latest root certificate file, suitable for the need to update or verify specific root certificate scenarios.

How to query the Mac system root certificate?

Mac system's root certificate storage and query methods are different from Windows, the following are two commonly used root certificate query methods.

1, through the keychain access query

open the launch pad, enter other folders to find the keychain access application, open the left navigation bar to select the system root certificate, the right list will display all built-in root certificates, double-click the root certificate to view the details, including issuer, valid period, fingerprint and other content, but also set the trust level of the root certificate.

2, through Safari browser query site root certificate

open the Safari browser to access the target website, click the lock icon on the left side of the address bar, select Show Certificate, and switch to the Trust tab in the pop-up window to see the root certificate information corresponding to the website. At the same time, you can view whether the trust status of the root certificate is normal.

How to verify the validity of the root certificate?

query to the root certificate, but also need to verify its validity, avoid encountering forged or expired root certificate, to ensure network access security.

1, check the root certificate valid period

whether the local system or online tools to query the root certificate, first to view the valid period information, if the root certificate has expired, the system will no longer trust the root certificate by default, then access to rely on the root certificate of the site will appear certificate error, need to timely update the root certificate or contact the authority to obtain a new certificate.

2, verify the root certificate fingerprint information

the fingerprint of the root certificate is the unique identification information, the standard fingerprint of the root certificate can be obtained through official channels, and the fingerprint of the root certificate can be compared with the query. If the two are consistent, the root certificate has not been tampered with. If it is inconsistent, it may be False root certificate, need to stop using it immediately and check the risk.

sum up, the root certificate query can choose different methods according to the usage scenario. Windows and Mac systems can query the local root certificate through the built-in tool, and can also view the root certificate associated with the site through the browser. Online tools are suitable for cross-system query and root certificate batch verification. At the same time, after the query, we should focus on verifying the valid period and fingerprint information of the root certificate to ensure the legitimacy and validity of the root certificate, so as to ensure the security and reliability of network access.