# Where can I see my Certificate Fingerprint?
**URL:** https://discuss.elastic.co/t/where-can-i-see-my-certificate-fingerprint/319335
**Category:** Elasticsearch
**Created:** [November 18, 2022, 10:22pm UTC](https://discuss.elastic.co/t/where-can-i-see-my-certificate-fingerprint/319335 "2022-11-18T22:22:48Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@asd11](https://discuss.elastic.co/u/asd11)
#### Post date: [November 18, 2022, 10:22pm UTC](https://discuss.elastic.co/t/where-can-i-see-my-certificate-fingerprint/319335/1 "2022-11-18T22:22:48Z")
The documentation says:
> the CA fingerprint logged by the server at initial startup.
However I can't find it. Is it in security -\> CA certificates? If yes, than I can download that file, but how can I get the fingerprint out of it?
The documentation says it should be something like this:
> HTTP CA certificate SHA-256 fingerprint:
> a52dd93511e8c6045e21f16654b77c9ee0f34aea26d9f40320b531c474676228
---
### Author:  [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [November 18, 2022, 11:56pm UTC](https://discuss.elastic.co/t/where-can-i-see-my-certificate-fingerprint/319335/2 "2022-11-18T23:56:57Z")
> **[Install Elasticsearch with Debian Package | Elasticsearch Guide \[8.11\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/deb.html#_use_the_ca_fingerprint_3)**
> ##### Use the CA fingerprint
>
> Copy the fingerprint value that’s output to your terminal when Elasticsearch starts, and configure your client to use this fingerprint to establish trust when it connects to Elasticsearch.
>
> If the auto-configuration process already completed, you can still obtain the fingerprint of the security certificate by running the following command. The path is to the auto-generated CA certificate for the HTTP layer.
`openssl x509 -fingerprint -sha256 -in config/certs/http_ca.crt`
---
### Author:  [@asd11](https://discuss.elastic.co/u/asd11)
#### Post date: [November 19, 2022, 1:16am UTC](https://discuss.elastic.co/t/where-can-i-see-my-certificate-fingerprint/319335/3 "2022-11-19T01:16:24Z")
> [@stephenb](#):
>
> `openssl x509 -fingerprint -sha256 -in config/certs/http_ca.crt`
Thank you! But what if I'm not running it locally, and I have deployment on [https://cloud.elastic.co/](https://cloud.elastic.co/). Where can I input this command?
---
### Author:  [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [November 19, 2022, 1:46am UTC](https://discuss.elastic.co/t/where-can-i-see-my-certificate-fingerprint/319335/4 "2022-11-19T01:46:25Z")
You can download the CA from Elastic Cloud,
Elastic Cloud -Deployment -\> Security -\> CA Cert and download the CA
Then run the command above against the cert you just downloaded
`openssl x509 -fingerprint -sha256 -in 0A139270B1760010139270B1760010BF598F6.crt`
It is a Public Signed Cert from an Official Cert Authority, curious how you want to use it?
---
### Author:  [@asd11](https://discuss.elastic.co/u/asd11)
#### Post date: [November 19, 2022, 1:55am UTC](https://discuss.elastic.co/t/where-can-i-see-my-certificate-fingerprint/319335/5 "2022-11-19T01:55:22Z")
Thank you again! I needed it so I could [connect to Elastic Search with a client instance](https://www.elastic.co/guide/en/elasticsearch/client/net-api/current/connecting.html#:~:text=The%20following%20snippet%20shows%20you%20how%20to%20create%20a%20client%20instance%20that%20connects%20to%20your%20Elasticsearch%20cluster%20via%20a%20single%20node%2C%20using%20the%20CA%20fingerprint%3A). The problem is that it says that the certificate is rejected
```auto
System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
System.Security.Authentication.AuthenticationException: The remote certificate was rejected by the provided RemoteCertificateValidationCallback.
```
---
### Author:  [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [November 19, 2022, 3:00am UTC](https://discuss.elastic.co/t/where-can-i-see-my-certificate-fingerprint/319335/6 "2022-11-19T03:00:57Z")
Paste your code..... 🙂
What URL and port did you put in?
Did you paste the fingerprint correctly?
Why are you not using the suggested [Cloud Method](https://www.elastic.co/guide/en/elasticsearch/client/net-api/current/connecting.html#cloud-deployment)... Though this should work too.
Also can you show more of the logs... more you show... more we can help
And since it is a Publicly Signed Cert and perhaps you just want to test, I don't think you even need the fingerprint check (maybe you do but this is not a self-signed cert which is what that example is)
note the `.es` in the Uri
```auto
var settings = new ElasticsearchClientSettings(new Uri("https://my-deployment.es.us-west1.gcp.cloud.es.io:9243"))
.Authentication(new BasicAuthentication("elastic", ""));
```
You could also probably just use the `ClientCertificate` setting
---
### Author:  [@asd11](https://discuss.elastic.co/u/asd11)
#### Post date: [November 20, 2022, 3:50pm UTC](https://discuss.elastic.co/t/where-can-i-see-my-certificate-fingerprint/319335/7 "2022-11-20T15:50:20Z")
Thank you! I was using a trial for testing and didn't need the cert. After removing it, I managed to connect!
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 18, 2022, 3:50pm UTC](https://discuss.elastic.co/t/where-can-i-see-my-certificate-fingerprint/319335/8 "2022-12-18T15:50:49Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.