Hi Viktor, > By "a file" you clearly mean a "PEM file" with one or more certificates exclosed in "-----BEGIN ...".."-----END ..." delimiters. Yes, this is what I mean. > openssl crl2pkcs7 -nocrl -certfile somefile.pem | opessl pkcs7 -print_certs -text Works like a charm! Thanks very much for your time and quick response! Best Regards Nan Xiao On Wed, Apr 7, 2021 at 10:46 AM Viktor Dukhovni <openssl-users@xxxxxxxxxxxx> wrote: > > On Wed, Apr 07, 2021 at 10:14:42AM +0800, Nan Xiao wrote: > > > Greetings from me! By default openssl-x509 can only dump one > > certificate from the file: > > By "a file" you clearly mean a "PEM file" with one or more certificates > exclosed in "-----BEGIN ...".."-----END ..." delimiters. With that > proviso, the command in question is: > > openssl crl2pkcs7 -nocrl -certfile somefile.pem | > opessl pkcs7 -print_certs -text > > The output format can be tweaked slightly, though not quite as much as > will "openssl x509". See the pkcs7(1) manpage for details. > > -- > Viktor.