How do I obtain Wasabi's current certificate chain?

In order to validate and obtain Wasabi's current certificate chain, you may run the command shown below and use the server certificate to configure your S3 backup application if they are required to be entered manually.

 

NOTE: This example discusses the use of Wasabi's us-east-2 storage region. To use other Wasabi storage regions, please use the appropriate Wasabi service URL as described in this article

Make sure to edit the connect 's3.us-east-2.wasabisys.com:443' as well as servername s3.us-east-2.wasabisys.com when using different storage regions.

 

$ echo | openssl s_client -connect 's3.us-east-2.wasabisys.com:443' -servername s3.us-east-2.wasabisys.com

CONNECTED(00000006)
depth=3 C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA Limited, CN = AAA Certificate Services
verify return:1
depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
verify return:1
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
verify return:1
depth=0 OU = Domain Control Validated, OU = EssentialSSL Wildcard, CN = *.s3.us-east-2.wasabisys.com
verify return:1
---
Certificate chain
0 s:/OU=Domain Control Validated/OU=EssentialSSL Wildcard/CN=*.s3.us-east-2.wasabisys.com
i:/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
1 s:/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
i:/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust RSA Certification Authority
2 s:/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust RSA Certification Authority
i:/C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
3 s:/C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
i:/C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/OU=Domain Control Validated/OU=EssentialSSL Wildcard/CN=*.s3.us-east-2.wasabisys.com
issuer=/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
---
No client certificate CA names sent
Server Temp Key: ECDH, P-384, 384 bits
---
SSL handshake has read 6814 bytes and written 389 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 4096 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES128-GCM-SHA256
Session-ID: F8F7EB40AD1ABF04A07E09BBD523264AAAC69053FD2443EB8EDF1CF92433F6DD
Session-ID-ctx:
Master-Key: 7267DF2EB2554E6E68AD50C4D6CB6593DDD9764EBB4A41005EAB0F7D3B99D582B8395D3D1FD0D2BE0EF19C2F4EAA5F3F
Start Time: 1623081584
Timeout : 7200 (sec)
Verify return code: 0 (ok)
---
DONE

 

 

 

 

Have more questions? Submit a request