IPSEC-LISTCACERTS(8)

💅 IPSEC-LISTCACERTS — bestie's guide to listing them CA certs

okay so real talk, this is ipsec-listcacerts from the Executable programs squad, and it does exactly one (1) thing and does it flawlessly. no notes. 🎀

---

✨ NAME ✨

ipsec-listcacerts — literally just lists your x.509 Certificate Authority (CA) certificates. that's the whole job. she's an icon, she's a legend, and she is the moment. 👑

---

🌸 SYNOPSIS 🌸

ipsec listcacerts [--utc] [--ctlsocket /run/pluto/pluto.ctl]

---

🦋 DESCRIPTION 🦋

so listcacerts shows you every single X.509 CA certificate chilling in the NSS database. that's it. she opens the door, flips on the light, and points at all the CA certs like "there they are bestie, go off". ✨

if you're like "wait, which database" — it's the NSS one. the NSS database is the main character here and the CA certs are all living in it rent free. 🏠💖

---

🎀 OPTIONS 🎀

okay the option lineup is small but mighty, no skips, we stan:

• --utc — shows the times in UTC instead of whatever local-time chaos your machine is on. clock in, be consistent, periodt. 🕐
• --ctlsocket /run/pluto/pluto.ctl — tells it where to find the control socket. default vibe is /run/pluto/pluto.ctl, because that's where pluto keeps her little command door. if you moved it (why would you), this is where you say so. 🔌

---

👀 SEE ALSO 👀

the whole extended universe fr fr, go read all of them, i'm not kidding:

• ipsec.conf(5)
• ipsec(8)
• ipsec-add(8)
• ipsec-algparse(8)
• ipsec-briefconnectionstatus(8)
• ipsec-briefstatus(8)
• ipsec-certutil(8)
• ipsec-checkconfig(8)
• ipsec-checknflog(8)
• ipsec-checknss(8)
• ipsec-connectionstatus(8)
• ipsec-crlutil(8)
• ipsec-delete(8)
• ipsec-down(8)
• ipsec-ecdsasigkey(8)
• ipsec-fetchcrls(8)
• ipsec-fipsstatus(8)
• ipsec-globalstatus(8)
• ipsec-import(8)
• ipsec-initnss(8)
• ipsec-letsencrypt(8)
• ipsec-listall(8)
• ipsec-listcerts(8)
• ipsec-listcrls(8)
• ipsec-listen(8)
• ipsec-listpubkeys(8)
• ipsec-modutil(8)
• ipsec-newhostkey(8)
• ipsec-ondemand(8)
• ipsec-pk12util(8)
• ipsec-pluto(8)
• ipsec-purgeocsp(8)
• ipsec-redirect(8)
• ipsec-replace(8)
• ipsec-rereadall(8)
• ipsec-rereadcerts(8)
• ipsec-rereadsecrets(8)
• ipsec-restart(8)
• ipsec-route(8)
• ipsec-rsasigkey(8)
• ipsec-setup(8)
• ipsec-showhostkey(8)
• ipsec-showroute(8)
• ipsec-showstates(8)
• ipsec-shuntstatus(8)
• ipsec-start(8)
• ipsec-status(8)
• ipsec-stop(8)
• ipsec-trafficstatus(8)
• ipsec-unroute(8)
• ipsec-up(8)
• ipsec-vfychain(8)
• ipsec-whack(8)

---

💀 BUGS 💀

none

not a single one. flawless. we love a bug-free queen. 💅✨

---

🫶 AUTHOR 🫶

Andrew Cagney, Tuomo Soini

---

no cap, this page is short but she ate and left no crumbs. go list those CA certs, bestie. 💖

---

shoutout to Libreswan 5.4.1, dated 10/23/2026 — that's the version and the date, mwah, kisses, bye bestie 💋🌈