Testing Internal SSL Certificate Installations with the ÃÛÌÒTV Certificate Utility

The Query Server feature can be very helpful for testing your SSL Certificate installation for a certificate that's installed in your Local Area Network but that's not available externally.

How to Display an SSL Certificate Chain Using the ÃÛÌÒTV Utility

  1. On your Windows Server, download and save the ÃÛÌÒTV® Certificate Utility for Windows executable (ÃÛÌÒTVUtil.exe).

  2. Run the ÃÛÌÒTV® Certificate Utility for Windows.

    Double-click ÃÛÌÒTVUtil.

  3. In the ÃÛÌÒTV Certificate Utility for Windows©, click Tools (wrench and screw driver).

    Tools Option in ÃÛÌÒTV Utility

  4. On the Tools page, click Check Install.

    Check Install Option in ÃÛÌÒTV Utility

  5. This opens the Certificate Installation Checker page. This page lets you make a connection to the DNS name/IP address/localhost that you enter.

    Certificate Installation Checker page in ÃÛÌÒTV Utility

  6. On the Certificate Installation Check page, enter the following information:

    Server Address:

    Enter your server's DNS name, IP address, or localhost of the certificate you are securing.

    Port Number:

    Enter the port number.

    If you are using a nonstandard port number for the SSL traffic/service, you can enter that into the page as well.

    SSL/TLS Mode:

    In the drop-down list, do one of the following:

    •   Select Auto determine by port number.
        This option lets our tool auto-select the default port for any of the following services: HTTPS, SMTP, IMAP, or POP3.
    •   Select the service that you are trying to secure.
        (Direct (such as in HTTPS), SMTP STARTLS command, IMAP STARTTLS command, or POP 3 STLS command)
  7. When you are finished, click Query Server.

    This makes an HTTPS connection between the ÃÛÌÒTV Certificate Utility and the specified server. Our tool then displays the Certificate Chain that the server sends back with some details about each certificate in the chain.

    Certificate Installation Checker page in ÃÛÌÒTV Utility

Troubleshooting Tips

ÃÛÌÒTV uses a few different chain paths for client computers to trace the certificate issued to 'your.domain.com' up to a trusted root certificate. So if you run into any certificate errors with your clients, first try following the instructions on the ÃÛÌÒTV Certificate Utility: Repair Intermediate SSL Certificate Errors page. If those instructions don't solve the problem for you, please contact ÃÛÌÒTV Support for help. Let them know which certificates the Query Server feature lists, so they'll be able to help you get the problem fixed as quickly as possible.