You won't remember the OpenSSL options, so here's bash shortcuts for everything
certsimple.com
certsimple.com
On the other hand, I've learned more from continuing to read the manpages than probably anything else. And the OpenSSL commands that I use frequently, such as connecting to a site with TLS, or checking a certificate chain, can now be easily recalled from memory, and I feel I'm better off for it, especially if I'm at a terminal where my OpenSSL functions might not be installed.
function openssl-encrypt() {
openssl enc -aes-256-cbc -salt -in "${1}" -out "${2}"
}function openssl-website-to-pin() { openssl s_client -connect ${1}:443 | openssl x509 -pubkey -noout | openssl rsa -pubin -outform der | openssl dgst -sha256 -binary | openssl enc -base64 }
Would probably be more verbose if named:
openssl-key-to-hpkp-pin
openssl-website-to-hpkp-pin