openssl x509 -text -noout -in certificate.crt

The p7b file contains the main domain cer, issuer server cert, and the cert for the server that requested the new cert.

openssl pkcs7 -inform DER -print_certs -in | awk ‘split_after==1{n++;split_after=0} /—–END CERTIFICATE—–/ {split_after=1} {print > “cert” n “.pem”}’

cp cert into /etc/pki/ca-trust/source/anchors/

Run the following comman:
update-ca-trust extract

Attributes to add when creating a subject alternative name

nano /etc/modprobe.d/bond1.conf
alias bond0 bonding
options bond0 mode=0 miimon=100

nano /etc/sysconfig/network-scripts/ifcfg-bond0
DEVICE=bond0
IPADDR=192.168.0.4
NETMASK=255.255.255.0
NETWORK=192.168.0.0
BROADCAST=192.168.0.255
ONBOOT=yes
BOOTPROTO=none
TYPE=Bond
BONDING_MASTER=yes
PREFIX=24
DEFROUTE=yes
NAME="Bond bond0"
BONDING_OPTS="mode=active-backup miimon=0 arp_ip_target=192.168.0.2 arp_interval=1000"
LAST_CONNECT=1530826407
NM_CONTROLLED=no

nano /etc/sysconfig/network-scripts/ifcfg-bond1
DEVICE=bond1
TYPE=Bond
BONDING_MASTER=yes
NAME=bond1
ONBOOT=yes
BONDING_OPTS="mode=4 miimon=100"
NM_CONTROLLED=no

Force a failover
ifenslave -c bond0 nic-id

Look at bonding state
cat /proc/net/bonding/bond0