I checked my ssl cert using: curl -v --cacert /etc/pki/tls/certs/logstash-forwarder.crt https://xx.0.0.xxx:5044
and i think the below means it is ok -
ALPN, offering http/1.1
- SSL connection using TLS1.2 / ECDHE_RSA_AES_256_GCM_SHA384
- server certificate verification OK
- server certificate status verification SKIPPED
- error fetching CN from cert:The requested data were not available.
- common name: (matched)
- server certificate expiration date OK
- server certificate activation date OK
- certificate public key: RSA
- certificate version: #3
- subject: C=AU,ST=Some-State,O=Internet Widgits Pty Ltd
- start date: Fri, 03 Mar 2017 21:11:40 GMT
- expire date: Mon, 01 Mar 2027 21:11:40 GMT
- issuer: C=AU,ST=Some-State,O=Internet Widgits Pty Ltd
- compression: NULL
- ALPN, server did not agree to a protocol
GET / HTTP/1.1
Host: 10.0.0.212:5044
User-Agent: curl/7.47.0
Accept: /
- Empty reply from server
- Connection #0 to host 10.0.0.212 left intact
curl: (52) Empty reply from server