.nh
.TH pki\-server\-cert 8 "February 1, 2019" PKI "pki\-server\-cert CLI"
.SH NAME
.PP
pki\-server\-cert \- Command\-Line Interface for managing System Certificates.

.SH SYNOPSIS
.PP
\fBpki\-server\fP [\fICLI\-options\fP] cert
.br
\fBpki\-server\fP [\fICLI\-options\fP] cert\-find
.br
\fBpki\-server\fP [\fICLI\-options\fP] cert\-show \fIcert\-ID\fP
.br
\fBpki\-server\fP [\fICLI\-options\fP] cert\-update \fIcert\-ID\fP
.br
\fBpki\-server\fP [\fICLI\-options\fP] cert\-create \fIcert\-ID\fP
.br
\fBpki\-server\fP [\fICLI\-options\fP] cert\-import \fIcert\-ID\fP
.br
\fBpki\-server\fP [\fICLI\-options\fP] cert\-export \fIcert\-ID\fP
.br
\fBpki\-server\fP [\fICLI\-options\fP] cert\-del \fIcert\-ID\fP
.br
\fBpki\-server\fP [\fICLI\-options\fP] cert\-fix

.SH DESCRIPTION
.PP
The \fBpki\-server cert\fP commands provide command\-line interfaces to manage system certificates.

.PP
\fBpki\-server cert\fP commands perform system certificate related operations on a specific CS instance.
All \fBpki\-server cert\fP commands require specification of the \fIcert\-ID\fP to identify the target certificate.

.PP
\fBpki\-server\fP [\fICLI\-options\fP] cert
.br
    List all available cert commands.

.PP
\fBpki\-server\fP [\fICLI\-options\fP] cert\-find
.br
    List all available system certificates.

.PP
\fBpki\-server\fP [\fICLI\-options\fP] cert\-show \fIcert\-ID\fP
.br
    Display details of a system certificate.

.PP
\fBpki\-server\fP [\fICLI\-options\fP] cert\-update \fIcert\-ID\fP
.br
    Update corresponding subsystem's CS.cfg with the system certificate data and CSR from NSS db

.PP
\fBpki\-server\fP [\fICLI\-options\fP] cert\-create \fIcert\-ID\fP
.br
    Create a new system certificate.

.PP
\fBpki\-server\fP [\fICLI\-options\fP] cert\-import \fIcert\-ID\fP
.br
    Import a system certificate into NSS database and update the corresponding subsystem's CS.cfg.

.PP
\fBpki\-server\fP [\fICLI\-options\fP] cert\-export \fIcert\-ID\fP
.br
    Export a system certificate or its CSR or its PKCS #12 to a file.

.PP
\fBpki\-server\fP [\fICLI\-options\fP] cert\-del \fIcert\-ID\fP
.br
    Remove a system certificate from NSS db.

.PP
\fBpki\-server\fP [\fICLI\-options\fP] cert\-fix
.br
    Fix all expired certs in the PKI instance.

.PP
To view each command's usage, type \fBpki\-server cert\-\<command\> \-\-help\fP\&.

.PP
All \fBpki\-server\fP commands must be executed as the system administrator.

.SH OPTIONS
.PP
The other CLI options are described in \fBpki\-server(8)\fP\&.

.SH SEE ALSO
.PP
\fBoffline\-cert\-renewal(7)\fP

.SH AUTHORS
.PP
Dinesh Prasanth M K \<dmoluguw@redhat.com\> and Endi S Dewata \<edewata@redhat.com\>

.SH COPYRIGHT
.PP
Copyright (c) 2018 Red Hat, Inc.
This is licensed under the GNU General Public License, version 2 (GPLv2).
A copy of this license is  available  at http://www.gnu.org/licenses/old\-licenses/gpl\-2.0.txt.