pkiutil verify -csr <csr>

Verifies a PKCS#10 certificate request.

pkiutil verify -csr <csr> [-pubkey <file> | -pubcert <file> ]

For example:

pkiutil verify -csr mycsr.pem -pubkey pub.pem

See below for a description of each option.

-csr <csr>

Verify the <csr> request, where <csr> is the name of a file containing the request.

Mandatory: Yes.

-pubcert <pubcert>

Verify the signature against the public key of the <pubcert> certificate, where <pubcert> is the name of a file containing the certificate.

Mandatory: When omitting the -pubkey command.

-pubkey <pubkey>

Verify the signature against the <pubkey> public key, where <pubkey> is the name of a file containing the key.

Mandatory: When omitting the -pubcert command.