Windows certutil -verify equivalent in Linux
Checks a certificate against a CA file.
certutil -verify
openssl verify -CAfile ca.pem cert.pem
openssl verify -CAfile ca.pem cert.pem
openssl verify -CAfile ca.pem cert.pem
Overview
What this command does
On Windows, "certutil -verify" is used to verify certificate. On Linux, the closest practical mapping shown here is "openssl verify -CAfile ca.pem cert.pem". Checks a certificate against a CA file. This reference is grouped under Security & Permissions → Certificates.
Windows → Linux context
What changes when you use this on Linux?
Equivalent task, different tool
Windows certutil -verify maps to openssl verify -CAfile ca.pem cert.pem for this task. Treat this as a workflow mapping rather than a character-for-character syntax translation.
Portable across the compared distros
The Debian/Ubuntu, Fedora and Arch rows use the same command in this mapping. Package availability or defaults can still vary, so check the installed tool version when an option behaves differently.
For the broader concept behind this mapping, read Linux permissions for Windows users.
Practical tasks
Common use cases
Verify certificate
Checks a certificate against a CA file.
openssl verify -CAfile ca.pem cert.pem
Verify certificate
openssl --help
Show command help when supported
man openssl
Open the manual page when installed
Ready to run
Copyable Linux commands
Review paths, device names, package names and permissions before running any command.
openssl verify -CAfile ca.pem cert.pem
Walkthrough
Examples with explanations
# Windows equivalent: certutil -verify
openssl verify -CAfile ca.pem cert.pemReference
Common options and variations
| Command or option | Use |
|---|---|
openssl verify -CAfile ca.pem cert.pem | Verify certificate |
openssl --help | Show command help when supported |
man openssl | Open the manual page when installed |
Distro differences
Debian/Ubuntu vs Fedora vs Arch
Debian/Ubuntu, Fedora and Arch all use "openssl verify -CAfile ca.pem cert.pem" for this mapping. The command syntax shown here is portable across the three rows, although installed versions and system defaults can still vary.
| Distribution | Package manager / base | Equivalent command | Difference to notice |
|---|---|---|---|
| Debian/Ubuntu | same command | openssl verify -CAfile ca.pem cert.pem |
Same command on this distribution. |
| Fedora | same command | openssl verify -CAfile ca.pem cert.pem |
Same command on this distribution. |
| Arch | same command | openssl verify -CAfile ca.pem cert.pem |
Same command on this distribution. |
Keep learning