Step 1: Connect to the correct server.
The video specifies that this task must be completed on host lfcs00094.
From the candidate terminal, execute:
ssh lfcs00094
This establishes an SSH connection to the designated Linux server.
All subsequent commands must be executed on this host.
Step 2: Navigate to the SSL certificate directory.
Execute:
cd ~/relaxed-llama/ssl
- cd changes the current working directory.
- ~ represents the current user's home directory.
- relaxed-llama/ssl is the directory specified in the task.
Verify the current directory:
pwd
Then list the contents:
ls -la
The directory should contain an SSL certificate file and existing subdirectories corresponding to certificate common names.
Step 3: Identify the SSL certificate file.
Execute:
find . -maxdepth 1 -type f -print
- find . searches from the current directory.
- -maxdepth 1 restricts the search to the current directory.
- -type f identifies regular files.
- -print displays their paths.
An SSL certificate commonly uses an extension such as .crt, .pem, or .cer, although other filenames are possible.
For example, a directory might contain:
/server.crt
/alpha.example.com/
/bravo.example.com/
/charlie.example.com/
These are illustrative filenames, not confirmed contents of the exam server.
Identify the actual certificate filename before continuing.
Step 4: Examine the SSL certificate using OpenSSL.
Once you have identified the certificate, run:
openssl x509 -in CERTIFICATE_FILENAME -noout -subject
Replace CERTIFICATE_FILENAME with the real filename.
For example, if the file is named server.crt:
openssl x509 -in server.crt -noout -subject
- openssl invokes the OpenSSL utility.
- x509 processes an X.509 certificate.
- -in server.crt specifies the certificate file.
- -noout suppresses the encoded certificate output.
- -subject displays the certificate's subject distinguished name.
An illustrative result is:
subject=C = US, ST = California, O = Example Corp, CN = bravo.example.com
The important field is:
CN = bravo.example.com
CN stands for Common Name, an attribute of the certificate's subject.
The actual value must come from the certificate on the designated host.
Step 5: Display the subject CN clearly.
For easier identification, execute:
openssl x509 -in CERTIFICATE_FILENAME \
-noout -subject -nameopt sep_multiline
This prints the subject attributes on separate lines.
Example:
subject=
countryName = US
stateOrProvinceName = California
organizationName = Example Corp
commonName = bravo.example.com
The commonName value is the information required to select the correct destination subdirectory.
Do not confuse the certificate's subject CN with its issuer CN or the Subject Alternative Name extension. The task specifically asks for the subject CN.
Step 6: Locate the matching subdirectory.
List the existing directories:
find . -maxdepth 1 -type d -print
If the certificate's subject CN is bravo.example.com, its matching destination should be:
~/relaxed-llama/ssl/bravo.example.com/
Verify that the matching directory exists:
ls -ld ~/relaxed-llama/ssl/bravo.example.com
Again, bravo.example.com is an example. Substitute the actual CN reported by OpenSSL.
The task states that the subdirectory has already been created.
Therefore, do not create a new directory unless you have established that the supplied environment differs from the task statement.
Step 7: Move the certificate into the correct subdirectory.
The Linux command for moving a file is mv.
Its basic syntax is:
mv SOURCE_FILE DESTINATION_DIRECTORY/
For example, if:
- Certificate filename: server.crt
- Subject CN: bravo.example.com
The command would be:
mv server.crt bravo.example.com/
This moves the certificate from:
~/relaxed-llama/ssl/server.crt
to:
~/relaxed-llama/ssl/bravo.example.com/server.crt
The original filename is preserved.
Before moving the actual file, ensure that the destination does not already contain a different file with the same name. You can use mv -i to request confirmation before overwriting an existing destination.
Do not copy the certificate using cp, because the task specifically requires moving it.
Step 8: Verify that the certificate was moved successfully.
Execute:
ls -l bravo.example.com/
The output should show the certificate inside the directory matching its CN.
Verify that the certificate no longer exists in the original location:
ls -l server.crt
For the illustrative filename, the expected response is:
ls: cannot access 'server.crt': No such file or directory
This indicates the original path no longer contains the file.
Step 9: Verify that the moved certificate is readable and unchanged.
Execute:
openssl x509 \
-in bravo.example.com/server.crt \
-noout -subject
The certificate's subject CN should be identical to the value obtained before the move.
For example:
subject=C = US, ST = California, O = Example Corp, CN = bravo.example.com
This confirms that the certificate is still readable and is located inside the corresponding CN directory.
Step 10: Perform the final directory verification.
Execute:
find ~/relaxed-llama/ssl -maxdepth 2 -type f -print
Confirm that the certificate appears at the expected destination.
The final directory structure should resemble:
~/relaxed-llama/ssl/
├── alpha.example.com/
├── bravo.example.com/
│ └── server.crt
└── charlie.example.com/
This directory structure is illustrative. The actual destination must match the CN obtained from the real certificate.
Final Solution
The essential command sequence is:
1. Navigate to the directory.
cd ~/relaxed-llama/ssl
2. List the files and directories.
ls -la
3. Identify the certificate's subject CN.
openssl x509 -in CERTIFICATE_FILENAME \
-noout -subject -nameopt sep_multiline
4. Move the certificate into its matching existing CN directory.
mv CERTIFICATE_FILENAME CN_DIRECTORY/
5. Verify the destination.
ls -l CN_DIRECTORY/
6. Confirm the certificate's subject again.
openssl x509 -in CN_DIRECTORY/CERTIFICATE_FILENAME \
-noout -subject
Replace CERTIFICATE_FILENAME and CN_DIRECTORY with the actual values discovered on the server.
Technical Verification and References
The solution is based on the officially documented behavior of OpenSSL and the GNU/Linux mv command.
- OpenSSL X.509: The -subject option displays the certificate subject; -noout suppresses certificate output; and -nameopt controls the format of the subject information.
OpenSSL Documentation
- GNU Coreutils: The mv command moves a file into an existing target directory while preserving its filename unless a new filename is explicitly supplied.
Official documentation: OpenSSL X.509 Certificate Command Reference.
Expected result: The existing SSL certificate is moved into the already-created subdirectory whose name matches the certificate's subject CN.
Important: The video reveals the task requirements but does not establish the actual certificate filename or subject CN from the target server. Therefore, assigning a particular destination without inspecting the certificate would be an unverified guess. The procedure above determines the correct destination directly from the certificate.
