ADSYSCTL_CERTIFICATE_STATUS(1)

💖 adsysctl-certificate-status — from the adsysctl girlies ✨

okay so bestie, this is a page from ADSys: adsysctl(1), and today we're doing a vibe check on a certificate. yes, a literal vibe check. a health check. same thing tbh.

🌸 NAME

adsysctl-certificate-status — show the health of an enrolled certificate 🩺

✨ SYNOPSIS

adsysctl certificate status [NICKNAME] [flags]

🦋 DESCRIPTION

Show the health of an enrolled certificate. that's it, that's the whole job, and she does it beautifully.

but here's the tea, and it's important tea: the process exit code is literally the diagnosis. like, the exit code IS the certificate's mood ring. so read it carefully:

• 0 — healthy 👑 she's thriving, no notes
• 2 — missing 💀 where is she. she's not here
• 3 — expired 😭 it's giving kind of over
• 4 — due for renewal 🎀 clock is clocking, bestie
• 5 — key mismatch or unparseable 🙈 something is Not Right
• 6 — not yet valid ⏳ she's early, be patient
• 1 — on error 🚨 the general "something went wrong" of it all

not me pointing out that exit code 1 is the generic error and everything else is a specific certificate situation. the way that matters when you're scripting!! script girlies know 💅

💅 OPTIONS

• --format="text" — output format. it's text or json, pick your fighter. text is the default, json is for when you're piping her somewhere fancy. iykyk
• -h, --help[=false] — help for status. literally just the help. she's helpful. default is false 🫶

🌈 OPTIONS INHERITED FROM PARENT COMMANDS

these ones come from the parent command, so they're not hers exactly, but she carries them everywhere like a little handbag of flags:

• -c, --config="" — use a specific configuration file. default is empty, meaning: do whatever you'd normally do ✨
• -s, --socket="/run/adsysd.sock" — socket path to use between daemon and client. can be overridden by systemd socket activation 👀 (yes, systemd can just take the wheel)
• -t, --timeout=30 — time in seconds before cancelling the client request when the server gives no result. 0 for no timeout. so 30 is the default, and 0 means she'll wait forever, main character patience 🕰️
• -v, --verbose[=0] — issue INFO (-v), DEBUG (-vv) or DEBUG with caller (-vvv) output. more v's, more lore 📖

🎀 SEE ALSO

• adsysctl-certificate(1)

💜 HISTORY

6-Oct-2026 — Auto generated by spf13/cobra

---

and that's the whole page, babe 🧚 auto generated by spf13/cobra, Oct 2026, under ADSys: adsysctl(1) — now go check on your certificates, they need you 🫶✨🔥