SQ(1)

👑 SQ(1) — the manual, but make it cute

okay bestie, so this is the SQ manual page — part of Sequoia PGP, user commands division 💖. Sit down, grab a boba, and let's get into it.

---

✨ NAME ✨

sq-key-subkey-expire — change a subkey's expiration time 🕰️

That's literally it. That's the whole job. She does one thing and she does it flawlessly.

---

🌸 SYNOPSIS 🌸

sq key subkey expire [OPTIONS]

---

🦋 DESCRIPTION 🦋

So here's the tea: this subcommand changes a key's expiration time. But baby, listen — if you wanna change the expiration time of the certificate itself, you want sq key expire instead. Different tool, different vibe. iykyk.

And here's the thing that lowkey trips people up: changing the expiration time of the primary key is equivalent to changing the certificate's expiration time. Same thing, no cap.

Also? The expiration time of a subkey is bound by the expiration of the certificate. So like… the subkey can't outlive the cert, periodt. Don't try to fight the hierarchy, she will win. 💅

---

💅 OPTIONS 💅

🎀 Subcommand options

• --cert=FINGERPRINT|KEYID — change the expiration of the specified (sub)keys on the key with the specified fingerprint or key ID. That's your target, bestie 🎯
• --cert-email=EMAIL — change the expiration of the specified (sub)keys on the key where a user ID includes the specified email address. Finding your key by email, iconic.
• --cert-file=PATH — change the expiration of the specified (sub)keys on the key read from PATH. She's reading it from a file, she's flexible like that.
• --cert-userid=USERID — change the expiration of the specified (sub)keys on the key with the specified user ID.
• --expiration=EXPIRATION — sets the expiration time ⏳

EXPIRATION is either an ISO 8601 formatted date with an optional time, or a custom duration. A duration takes the form N[ymwds], where the letters stand for years, months, weeks, days, and seconds, respectively. Alternatively, the keyword never does not set an expiration time — so it's forever, literally immortal, main character energy 👑

[default: never]

• --key=FINGERPRINT|KEYID — use the key with the specified fingerprint or key ID.
• --output=FILE — write to the specified FILE 📝

And here's the important bit, no skipping: if you don't specify it, and the certificate was read from the certificate store, it imports the modified certificate into the cert store. If you don't specify it, and the certificate was read from a file, it writes the modified certificate to stdout. Two paths, two outcomes, read carefully bestie 🫶

🌈 Global options

See sq(1) for a description of the global options. Yeah, she's got a big sister, go ask her.

---

🍓 EXAMPLES 🍓

Change Alice's authentication subkey to expire in 6 months. Slay, Alice. ✨

sq key subkey expire --expiration 6m \
       --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \
       --key=0D45C6A756A038670FDFD85CB1C82E8D27DB23A1

---

🔥 SEE ALSO 🔥

• sq(1)
• sq-key(1)
• sq-key-subkey(1)

For the full documentation see <https://book.sequoia-pgp.org/>. Go read it, it's giving academic but in a good way 📚

---

⭐ VERSION ⭐

1.5.0

---

<div align>

okay that's the whole page, go forth and expire those subkeys responsibly 💜

this has been Sequoia PGP, version 1.5.0, manual page SQ(1) — mwah, bye bestie 🎀🦋✨

</div>