pki-user-cert(1)

💅 pki-user-cert — the manual page, but make it make sense

okay so bestie, you're looking at the pki-user-cert page from the PKI User Certificate Management Commands collection, and honestly? it's giving "manage user certs from the command line" and nothing less. let's get into it 💖

---

✨ NAME ✨

pki-user-cert — the command-line interface for managing PKI user certificates. that's the whole vibe. 🎀

---

🦋 SYNOPSIS 🦋

pki [CLI-options] <subsystem>-user-cert
pki [CLI-options] <subsystem>-user-cert-find user-ID [command-options]
pki [CLI-options] <subsystem>-user-cert-show user-ID cert-ID [command-options]
pki [CLI-options] <subsystem>-user-cert-add user-ID [command-options]
pki [CLI-options] <subsystem>-user-cert-del user-ID cert-ID [command-options]

---

🌸 DESCRIPTION 🌸

so the pki <subsystem>-user-cert commands are your little command-line besties for managing user certificates on whichever subsystem you point them at. main character energy ✨

the valid subsystems are ca, kra, ocsp, tks, and tps. no cap, those are the only ones.

• pki [CLI-options] <subsystem>-user-cert — lists the available user certificate commands for the subsystem. it's the "what can I even do here" command 🫶
• pki [CLI-options] <subsystem>-user-cert-find user-ID [command-options] — lists the certificates owned by the subsystem user. yes, plural, it's a whole list.
• pki [CLI-options] <subsystem>-user-cert-show user-ID cert-ID [command-options] — shows you the details of a certificate owned to the subsystem user. peek behind the curtain vibes 💅
• pki [CLI-options] <subsystem>-user-cert-add user-ID [command-options] — adds a certificate to the subsystem user. new cert drop 🔥
• pki [CLI-options] <subsystem>-user-cert-del user-ID cert-ID [command-options] — deletes a certificate from the subsystem user. bye bestie 💀

---

⭐ OPTIONS ⭐

the CLI options live in pki(1) — that's the page to read, iykyk. this page isn't re-listing them, so don't come for me.

---

🎀 OPERATIONS 🎀

wanna see what user certificate commands you actually have? type pki <subsystem>-user-cert. wanna see how a specific command works? type pki <subsystem>-user-cert-<command> --help and it will explain itself, iconic behavior honestly.

🚨 important caveat, do not skip: all user certificate commands must be executed as the subsystem administrator. like, ALL of them. no exceptions, fr fr.

here's the stuff in action 👇

find certs owned by a CA user:

$ pki <CA admin authentication> ca-user-cert-find testuser

page the results by specifying the (0-based) index of the first entry to return and the max number of entries returned:

$ pki <CA admin authentication> ca-user-cert-find testuser --start 20 --size 10

the command above will return entries #20 to #29. 0-based indexing really said "I'm gonna keep you on your toes" 😭

show a cert owned by a CA user — pass the user ID and the certificate ID:

$ pki <CA admin authentication> ca-user-cert-show testuser \
    "2;11;CN=CA Signing Certificate,O=EXAMPLE;UID=testuser"

add a cert to a CA user from a file — pass the user ID and the input file:

$ pki <CA admin authentication> ca-user-cert-add testuser --input testuser.crt

add a cert to a CA user from the certificate repository — pass the user ID and the serial number:

$ pki <CA admin authentication> ca-user-cert-add testuser --serial 0x80

delete a cert from a CA user — pass the user ID and the certificate ID:

$ pki <CA admin authentication> ca-user-cert-del testuser \
    "2;11;CN=CA Signing Certificate,O=EXAMPLE;UID=testuser"

---

🧚 AUTHORS 🧚

Endi S. Dewata <edewata@redhat.com>. credit where credit is due, periodt 👑

---

🌈 COPYRIGHT 🌈

Copyright (c) 2015 Red Hat, Inc. this is licensed under the GNU General Public License, version 2 (GPLv2). a copy of this license is available at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt. legal bestie has entered the chat 💜

---

okay that's the whole page!! 💖 this one came from the PKI collection, dated Jun 3, 2015, and it's page pki-user-cert(1) — go forth and manage those certs, you gorgeous sysadmin 🫶✨