I'm trying to validate/verify that the rsa key, ca-bundle, and certificate stored here are ok. They are not being served by a webserver. How can I verify them?
Assuming your certificates are in PEM format, you can do:
If your "ca-bundle" is a file containing additional intermediate certificates in PEM format:
If your openssl isn't set up to automatically use an installed set of root certificates (e.g. in
Here is one-liner to verify certificate chain:
This doesn't require to install CA anywhere.