Wireshark · Wireshark-users: [Wireshark-users] Extracting SSL Certs using Tshark

[Shaanan Cohney <shaananc@xxxxxxxxxxx>]

Hi,

I was wondering if it is possible/how one extracts SSL certs from Server Certificate messages using only tshark. 

I see in the display filter page for SSL both ssl.handshake.certificate and ssl.handshake.certificates but neither seem to extract the necessary bytes on my pcaps.

Thanks!