---
name: "eurephiadm-certs"
section: "7"
platform: "linux"
package: "eurephia"
version: "1.1.1-3"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/eurephiadm-certs"
---

# eurephiadm-certs(7)

Certificate management for eurephia

## NAME

**eurephiadm-certs - Certificate management for** **eurephia**

## DESCRIPTION

Available modes for the certificate command are:

- **-A** \| **--add**

  Register a new certificate

- **-D** \| **--delete**

  Delete a registered certificate

- **-l** \| **--list**

  List all registered certificates

**-h** \| **--help** \<mode\>\
 Help about a specific mode

## LIST MODE

The list mode will list all registered certificates.  It accepts one parameter:

- **-S** \| **--sort** \<sort key\>

  Decide the sort order of the certificate list

Available sort keys are:

-

  **certid**\
    Numeric certificate ID

-

  **depth**\
    Certificate depth

-

  **digest**\
    Certificate SHA1 digest

-

  **cname**\
    Certificate Common Name field

-

  **org**\
    Certificate organisation field

-

  **email**\
    Certificate e-mail address field

-

  **registered**\
    When the certificate was registered in eurephia.

## ADD MODE

The add mode will register a new certificate.

- **-d** \| **--depth**

  Certificate depth, required.

- **-D** \| **--digest**

  SHA1 fingerprint/digest of the new certificate

- **-C** \| **--common-name**

  Common name (CN) field of the certificate

- **-O** \| **--organisation**

  Organisation (O) field of the certificate

- **-E** \| **--email**

  e-mail address (emailAddress) of the certificate

Usually the certificate depth value needs to be 0, if you are registering user account certificates. CA certificates usually have a value bigger than 0.

If you have the certificate file available, you can use the following options to retrieve the needed information directly from a certificate file.

- **-f** \| **--certfile**

  File name of the certificate file.

- **-p** \| **--pkcs12**

  If the file is in PKCS#12 format.

The default format is PEM format, unless **--pkcs12** is given.  These two options cannot be used together with **-D**, **-C**, **-O** or **-E**.  But the certificate depth must be given to indicate the certificate depth.

## DELETE MODE

The delete mode will remove a certificate from the certificate database.

- **-i** \| **--certid**

  Indicates a unique certificate ID

- **-d** \| **--digest**

  A unique SHA1 fingerprint/digest value

- **-C** \| **--common-name**

  Common Name (CN) field of a certificate

- **-O** \| **--organisation**

  Organisation (O) field of a certificate

- **-E** \| **--email**

  e-mail address (emailAddress) of a certificate

You can use any of these parameters to indicate a search criteria for the certificate (or certificates) you want to delete.  You will be provided with a list over certificates which matches your search criteria and you will need to approve the deletion of the matching certificate(s).

## SEE ALSO

[**eurephiadm-users**(7)](/eurephiadm-users/7.md), [**eurephiadm-usercerts**(7)](/eurephiadm-usercerts/7.md)

## AUTHOR

Copyright (C) 2008-2012  David Sommerseth \<dazo@users.sourceforge.net\>