Skip to main content
fgilloteau_FTNT
Staff
Staff
December 23, 2014

Technical Tip: How to extract a certificate from a Wireshark capture

  • December 23, 2014
  • 0 replies
  • 43228 views

Description
Here is an example of a wireshark capture corresponding to an IKE negotiation.
To extract the certificate, you should open the IKE layer, Certificate Payload, Certificate Data.


fgilloteau_export_certificate.jpg


Then right-click on Certificate Data and choose "Export Selected Packet Bytes".
Save the content to a file named <filename>.crt

Then you can display the certificate by opening the .crt filename

fgilloteau_certif.jpg

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!