IPSEC-LISTCERTS(8)

💖 IPSEC-LISTCERTS 💖

okay bestie so this is ipsec-listcerts — that's the page you're on, from section 8 of the manual (the "sysadmin commands" section, iykyk) 👑 it lives in the ipsec family and it's literally just here to show you your certs, and we're gonna walk through it together, no cap ✨

---

🌸 NAME 🌸

ipsec-listcerts — say it with me — lists all the X.509 certificates that got loaded up from your NSS database. that's it. that's the job. 💅

---

✨ SYNOPSIS ✨

ipsec listcerts [--ctlsocket /run/pluto/pluto.ctl]

so you run ipsec listcerts, and if you wanna get fancy you can point it at a specific control socket with --ctlsocket. otherwise it just does its thing 🫶

---

🦋 DESCRIPTION 🦋

okay so here's the tea, bestie ☕ ipsec listcerts lists all the X.509 certificates loaded locally using the rightcert and leftcert parameters in ipsec.conf(5). that's the whole vibe — it's showing you what actually got pulled in by your config, not just what's chillin' in the database.

and if you're like "wait, but I wanna see every certificate in the NSS database, not just the loaded ones" — valid!! iconic question!! — then you want ipsec certutil -L instead. different tool, different energy 💅

not me clarifying that these are two different commands, because they ARE two different commands, and conflating them is a whole mess 😭

---

🌈 SEE ALSO 🌈

the extended universe is huge, bestie, these all ate:

• ipsec.conf(5)
• ipsec(8)
• ipsec-add(8)
• ipsec-algparse(8)
• ipsec-briefconnectionstatus(8)
• ipsec-briefstatus(8)
• ipsec-certutil(8)
• ipsec-checkconfig(8)
• ipsec-checknflog(8)
• ipsec-checknss(8)
• ipsec-connectionstatus(8)
• ipsec-crlutil(8)
• ipsec-delete(8)
• ipsec-down(8)
• ipsec-ecdsasigkey(8)
• ipsec-fetchcrls(8)
• ipsec-fipsstatus(8)
• ipsec-globalstatus(8)
• ipsec-import(8)
• ipsec-initnss(8)
• ipsec-letsencrypt(8)
• ipsec-listall(8)
• ipsec-listcacerts(8)
• ipsec-listcrls(8)
• ipsec-listen(8)
• ipsec-listpubkeys(8)
• ipsec-modutil(8)
• ipsec-newhostkey(8)
• ipsec-ondemand(8)
• ipsec-pk12util(8)
• ipsec-pluto(8)
• ipsec-purgeocsp(8)
• ipsec-redirect(8)
• ipsec-replace(8)
• ipsec-rereadall(8)
• ipsec-rereadcerts(8)
• ipsec-rereadsecrets(8)
• ipsec-restart(8)
• ipsec-route(8)
• ipsec-rsasigkey(8)
• ipsec-setup(8)
• ipsec-showhostkey(8)
• ipsec-showroute(8)
• ipsec-showstates(8)
• ipsec-shuntstatus(8)
• ipsec-start(8)
• ipsec-status(8)
• ipsec-stop(8)
• ipsec-trafficstatus(8)
• ipsec-unroute(8)
• ipsec-up(8)
• ipsec-vfychain(8)
• ipsec-whack(8)

---

💀 BUGS 💀

none

not a single one. the bug list said "we're full" and meant it. flawless behavior, honestly, periodt. 🙈✨

---

🎀 AUTHOR 🎀

Andrew Cagney, Tuomo Soini — legends, both of them, we stan 👑

---

okay bestie that's the whole page 💜 this was Libreswan 5.4.1, dated 10/23/2026, and honestly? iconic. go list those certs, you got this 🌸🦋💅