SSPIClient Certificate format

[wojciech-wejhan]

Hi. What is the format of the certificates that SSPIClient extracts? I am using a self-signed certificate that is generated when SQL Server starts. I would like to view the details of this certificate, especially the validity period.

[PehDeh]

as an alternative use
.\openssl.exe s_client -servername sqlserver.some.domain -connect sqlserver.some.domain:1433 2>null | .\openssl.exe x509 -noout -enddate

[wojciech-wejhan]

Unfortunately it doesn't work, OpenSSL can't communicate using the TDS protocol.

[MalcolmStewart]

The SQL Server self-signed certificate is in-memory only and not persisted to the certificate store. You can only see it in the Client Hello TLS network packet.