I have installed a SSL certificate on a server. Now, I want to check if it is correctly installed and is working. I have heard from my friend that when you are installing your own certificates in keystore the alias should be same as it is in the application code which communicates using port 443 with its partners having same chain of certificates. Can you tell me how we check if a certificate is correctly installed?
Use SSL Labs
For a first test, run the URL through SSL Labs:
- https://www.ssllabs.com/ssltest/ (Be sure to check the Do not show the results on the boards checkbox.)
- Or try HTBridge: https://www.htbridge.com/ssl/ (Be sure to check the Do not display test results in statistics checkbox.)
This will tell you if the certificate is correctly installed when looking at it from the outside.
Keystore alias probably won't matter
Now concerning the "keystore alias": That is only visible from inside the server. So you will have to ask the developers of your specific software if their software cares about the alias. (I don't think it should care about it.)
I just wanted to point/link to something that I find very useful.
This page, on top of providing a very good explanation of some of the warnings we do get using SSL Test from SSL Labs (they do the same), also provides Windows powershell snippets (or the full script) that will help you getting a better configuration in case you are using Windows in the webserver.