[get certificate fingerprint] Extraxt Base64 encoded certificate fingerprint for HPKP #bash #shell #openssl #pinning #hpkp

extract_certificate_fingerprints.sh

#!/usr/bin/env bash

# from Ceritifcate Signing Requets (for backpup certificate pinning):
$ openssl req -pubkey < DOMAIN.csr | openssl pkey -pubin -outform der | openssl dgst -sha256 -binary | base64

# from Public Certificate file (for main certificate pinning):
$ cat DOMAIN.crt | openssl x509 -pubkey -noout | openssl pkey -pubin -outform der | openssl dgst -sha256 -binary | openssl enc -base64