1$ openssl x509 -in 1900009191_20180326_cert.pem -noout -serial
2serial=1DDE55AD98ED71D6EDD4A4A16996DE7B47773A8C
3

1/**
2 * 获取证书。
3 *
4 * @param filename 证书文件路径  (required)
5 * @return X509证书
6 */
7public static X509Certificate getCertificate(String filename) throws IOException {
8	InputStream fis = new FileInputStream(filename);
9	BufferedInputStream bis = new BufferedInputStream(fis);
10
11	try {
12		CertificateFactory cf = CertificateFactory.getInstance("X509");
13		X509Certificate cert = (X509Certificate) cf.generateCertificate(bis);
14		cert.checkValidity();
15		return cert;
16	} catch (CertificateExpiredException e) {
17		throw new RuntimeException("证书已过期", e);
18	} catch (CertificateNotYetValidException e) {
19		throw new RuntimeException("证书尚未生效", e);
20	} catch (CertificateException e) {
21		throw new RuntimeException("无效的证书文件", e);
22	} finally {
23		bis.close();
24	}
25}
26

1 
2/**
3* Read certificate from file
4*
5* @param string    $filepath     PEM encoded X.509 certificate file path
6* 
7* @return resource|bool  X.509 certificate resource identifier on success or FALSE on failure
8*/
9public static function getCertificate($filepath) {
10    return openssl_x509_read(file_get_contents($filepath));}
11

1openssl pkcs7 -print_certs -in CertTrustChain.p7b -inform der -out CertTrustChain.pem
2

1openssl verify -verbose -CAfile ./CertTrustChain.pem ./WeChatPayPlatform.pem 
2