OpenSSL quick commands
Get info about a web server cert
openssl s_client -showcerts -connect registry.nexgen-poc.lan:5010 </dev/null
Validate a crt against a CA crt
openssl verify -CAfile rootCA.crt registry.nexgen-poc.lan.crt
Thanks @Deep for spotting the error!