# Checking your SSL/TLS certificate

Category: [Certificates](https://dev.cloudvip.com/en/faq/certificates.md)
Source page: [https://dev.cloudvip.com/en/faq/certificates/checking-your-ssl-tls-certificate](https://dev.cloudvip.com/en/faq/certificates/checking-your-ssl-tls-certificate)

You have followed the “Create a certificate signing request” procedure and received your SSL certificate signed by the trusted authority. Follow this procedure:

Step 1

You have received your certificate, which begins with:

-----BEGIN CERTIFICATE-----

and ends with:

-----END CERTIFICATE-----

Save it in a file named “www.mondomaine.be.crt” alongside the key and CSR you created previously.

Step 2

>
openssl x509 -in www.mondomaine.be.crt -text -noout

The signed certificate is displayed on screen.

You can check the “Not After : Aug 25 23:59:59 2022 GMT” line to see when the certificate expires.

Optional

To check whether your certificate is linked to the correct key:

openssl pkey -in www.mondomaine.be.key -pubout -outform pem | sha256sum 
openssl x509 -in www.mondomaine.be.crt -pubkey -noout -outform pem | sha256sum 
openssl req -in www.mondomaine.be.csr -pubkey -noout -outform pem | sha256sum 

If all three SHA-256 sums are identical, your key, certificate signing request and signed certificate originate from the same key.