Is there any way I can find out what version of OpenSSL is being used on a server I don't admin? The reason I ask this question is that I'm trying to verify that a certain website is PCI compliant. I know from being PCI compliant on all of my own servers that you must have the latest installed ver of OpenSSL other wise you fail the PCI test. So, I'm trying to see what their ver is of OpenSSL and if it's an older ver then I know they are not PCI scanning like they should be doing.

Thanks

It takes a lot more than the latest version of Open SSL to prove PCI Compliance.