--- name: "getcert-list" section: "1" platform: "linux" package: "certmonger" version: "0.79.20-2" release: "Debian 13 (Trixie)" platforms: ["linux"] url: "https://new.carta.tech/getcert-list" --- # getcert-list(1) ## NAME getcert ## SYNOPSIS getcert list \[options\] ## DESCRIPTION Queries *certmonger* for a list of certificates which it is monitoring or attempting to obtain. ## ENROLLMENT OPTIONS - **-c** *NAME*, **--ca**=*NAME* List only entries which use the specified CA. The name of the CA should correspond to one listed by *getcert list-cas*. ## LISTING OPTIONS - **-r**, **--requests-only** List only entries which are either currently being enrolled or refreshed. - **-t**, **--tracking-only** List only entries which are not currently being enrolled or refreshed. - **-u**, **--utc** Display timestamps in UTC instead of local time. - **-d** **DIR**, **--dbdir**=*DIR* List only entries which use an NSS database in the specified directory for storing the certificate. - **-n** *NAME*, **--nickname**=*NAME* List only tracking requests which use an NSS database and the specified nickname for storing the certificate. - **-f** *FILE*, **--certfile**=*FILE* List only tracking requests which specify that the certificate should be stored in the specified file. - **-i** *NAME*, **--id**=*NAME* List only tracking requests which use this request nickname. ## STATES - NEED\_KEY\_PAIR The service is about to generate a new key pair. - GENERATING\_KEY\_PAIR The service is currently generating a new key pair. - NEED\_KEY\_GEN\_PERMS The service encountered a filesystem permission error while attempting to save the newly-generated key pair. - NEED\_KEY\_GEN\_PIN The service is missing the PIN which is required to access an NSS database in order to save the newly-generated key pair, or it has an incorrect PIN for a database. - NEED\_KEY\_GEN\_TOKEN The service was unable to find a suitable token to use for generating the new key pair. - HAVE\_KEY\_PAIR The service has successfully generated a new key pair. - NEED\_KEYINFO The service needs to read information about the key pair. - READING\_KEYINFO The service is currently reading information about the key pair. - NEED\_KEYINFO\_READ\_PIN The service is missing the PIN which is required to access an NSS database in order to read information about the newly-generated key pair, or it has an incorrect PIN for a database, or has an incorrect password for accessing a key stored in encrypted PEM format. - NEED\_KEYINFO\_READ\_TOKEN The service was unable to find the token in which the key pair is supposed to be stored. - HAVE\_KEYINFO The service has successfully read information about the key pair. - NEED\_CSR The service is about to generate a new signing request. - GENERATING\_CSR The service is generating a signing request. - NEED\_CSR\_GEN\_PIN The service is missing the PIN which is required to access an NSS database in order to use the key pair, or it has an incorrect PIN for a database, or has an incorrect password for reading a key stored in encrypted PEM format. - NEED\_CSR\_GEN\_TOKEN The service was unable to find the token in which the key pair is supposed to be stored. - HAVE\_CSR The service has successfully generated a signing request. - NEED\_SCEP\_DATA The service is about to generate data specifically needed for connecting to a CA using SCEP. - GENERATING\_SCEP\_DATA The service is generating data specifically needed for connecting to a CA using SCEP. - NEED\_SCEP\_GEN\_PIN The service is missing the PIN which is required to access an NSS database in order to use the key pair, or it has an incorrect PIN for a database, or has an incorrect password for reading a key stored in encrypted PEM format. - NEED\_SCEP\_GEN\_TOKEN The service was unable to find the token in which the key pair is supposed to be stored. - NEED\_SCEP\_ENCRYPTION\_CERT The service is waiting until it can retrieve a copy of the CA's certificate before it can generate data required for connecting to the CA using SCEP. - NEED\_SCEP\_RSA\_CLIENT\_KEY The CA should be contacted using SCEP, but SCEP requires the client key pair to be an RSA key pair, and it is not. - HAVE\_SCEP\_DATA The service has successfully generated data for use in SCEP. - NEED\_TO\_SUBMIT The service is about to submit a signing request to a CA for signing. - SUBMITTING The service is currently submitting a signing request to a CA for signing. - NEED\_CA The service can't submit a request to a CA because it doesn't know which CA to use. - CA\_UNREACHABLE The service was unable to contact the CA, but it will try again later. - CA\_UNCONFIGURED The service is missing configuration which will be needed in order to successfully contact the CA. - CA\_REJECTED The CA rejected the signing request. - CA\_WORKING The CA has not yet approved or rejected the request. The service will check on the status of the request later. - NEED\_TO\_SAVE\_CERT The CA approved the signing request, and the service is about to save the issued certificate to the location where it has been told to save it. - PRE\_SAVE\_CERT The service is running a configured pre-saving command before saving the newly-issued certificate to the location where it has been told to save it. - START\_SAVING\_CERT The service is starting to save the issued certificate to the location where it has been told to save it. - SAVING\_CERT The service is attempting to save the issued certificate to the location where it has been told to save it. - NEED\_CERTSAVE\_PERMS The service encountered a filesystem permission error while attempting to save the newly-issued certificate to the location where it has been told to save it. - NEED\_CERTSAVE\_TOKEN The service is unable to find the token in which the newly-issued certificate is to be stored. - NEED\_CERTSAVE\_PIN The service is missing the PIN which is required to access an NSS database in order to save the newly-issued certificate to the location where it has been told to save it. - NEED\_TO\_SAVE\_CA\_CERTS The service is about to save the certificate of the issuing CA to the locations where it has been told to save them. - START\_SAVING\_CA\_CERTS The service is starting to save the certificate of the issuing CA to the locations where it has been told to save them. - SAVING\_CA\_CERTS The service is saving the certificate of the issuing CA to the locations where it has been told to save them. - NEED\_TO\_SAVE\_ONLY\_CA\_CERTS The service is about to save the certificate of the issuing CA to the locations where it has been told to save them. - START\_SAVING\_ONLY\_CA\_CERTS The service is starting to save the certificate of the issuing CA to the locations where it has been told to save them. - SAVING\_ONLY\_CA\_CERTS The service is saving the certificate of the issuing CA to the locations where it has been told to save them. - NEED\_CA\_CERT\_SAVE\_PERMS NEED\_ONLY\_CA\_CERT\_SAVE\_PERMS The service encountered a filesystem permission error while attempting to save the certificate of the issuing CA to the locations where it has been told to save them. - NEED\_TO\_READ\_CERT The service is about to read the issued certificate from the location where it has been told to save it. - READING\_CERT The service is reading the issued certificate from the location where it has been told to save it. - SAVED\_CERT The service has finished finished saving the issued certificate and the issuer's certificate to the locations where it has been told to save them. - POST\_SAVED\_CERT The service is running a configured post-saving command after saving the newly-issued certificate to the location where it has been told to save them. - MONITORING The service is monitoring the certificate and waiting for its not-valid-after date to approach. This is expected to be the status most often seen. - NEED\_TO\_NOTIFY\_VALIDITY The service is about to notify the system administrator that the certificate's not-valid-after date is approaching. - NOTIFYING\_VALIDITY The service is notifying the system administrator that the certificate's not-valid-after date is approaching. - NEED\_TO\_NOTIFY\_REJECTION The service is about to notify the system administrator that the CA rejected the signing request. - NOTIFYING\_REJECTION The service is notifying the system administrator that the CA rejected the signing request. - NEED\_TO\_NOTIFY\_ISSUED\_SAVE\_FAILED The service is needs to notify the system administrator that the CA issued a certificate, but that there was a problem saving the certificate to the location where the service was told to save it. - NOTIFYING\_ISSUED\_SAVE\_FAILED The service is is notifying the system administrator that the CA issued a certificate, but that there was a problem saving the certificate to the location where the service was told to save it. - NEED\_TO\_NOTIFY\_ISSUED\_CA\_SAVE\_FAILED The service is needs to notify the system administrator that the CA issued a certificate, and the issued certificate was saved to the location where the service has been told to save it, but that there was a problem saving the CA's certificate to the locations where the service was told to save it. - NOTIFYING\_ISSUED\_CA\_SAVE\_FAILED The service is notifying the system administrator that the CA issued a certificate, and the issued certificate was saved to the location where the service has been told to save it, but that there was a problem saving the CA's certificate to the locations where the service was told to save it. - NEED\_TO\_NOTIFY\_ISSUED\_SAVED The service is needs to notify the system administrator that the CA issued a certificate and it has been saved to the location where the service has been told to save it. - NOTIFYING\_ISSUED\_SAVED The service is notifying the system administrator that the CA issued a certificate and it has been saved to the location where the service has been told to save it. - NEED\_TO\_NOTIFY\_ONLY\_CA\_SAVE\_FAILED The service needs to notify the system administrator that there was a problem saving the CA's certificates to the specified location. - NOTIFYING\_ONLY\_CA\_SAVE\_FAILED The service is notifying the system administrator that there was a problem saving the CA's certificates to the specified location. - NEED\_GUIDANCE An unhandled error was encountered while attempting to contact the CA, or there is the service has just been told to monitor a certificate which does not exist and for which it has no location specified for storing a key pair that could be used to generate a signing request to obtain one. - NEWLY\_ADDED The service has just been told to track a certificate, or to generate a signing request to obtain one. - NEWLY\_ADDED\_START\_READING\_KEYINFO The service has just been told to track a certificate, or to generate a signing request to obtain one, and is about to check if there is already a key pair present. - NEWLY\_ADDED\_READING\_KEYINFO The service has just been told to track a certificate, or to generate a signing request to obtain one, and is checking if there is already a key pair present. - NEWLY\_ADDED\_NEED\_KEYINFO\_READ\_PIN The service has just been told to track a certificate, or to generate a signing request to obtain one, and was unable to check if a key pair was present because it is missing the PIN which is required to access an NSS database, or because it has an incorrect PIN for a database. - NEWLY\_ADDED\_NEED\_KEYINFO\_READ\_TOKEN The service has just been told to track a certificate, or to generate a signing request to obtain one, and was unable to check if a key pair was present because the token which should be used for storing the key pair is not present. - NEWLY\_ADDED\_START\_READING\_CERT The service has just been told to track a certificate, or to generate a signing request to obtain one, and is about to check if a certificate is already present in the specified location. - NEWLY\_ADDED\_READING\_CERT The service has just been told to track a certificate, or to generate a signing request to obtain one, and is checking if a certificate is already present in the specified location. - NEWLY\_ADDED\_DECIDING The service has just been told to track a certificate, or to generate a signing request to obtain one, and is determining its next course of action. ## BUGS Please file tickets for any that you find at https://fedorahosted.org/certmonger/ ## SEE ALSO [**certmonger**(8)](/certmonger/8.md) [**getcert**(1)](/getcert/1.md) [**getcert-add-ca**(1)](/getcert-add-ca/1.md) [**getcert-add-scep-ca**(1)](/getcert-add-scep-ca/1.md) [**getcert-list-cas**(1)](/getcert-list-cas/1.md) [**getcert-modify-ca**(1)](/getcert-modify-ca/1.md) [**getcert-refresh-ca**(1)](/getcert-refresh-ca/1.md) [**getcert-refresh**(1)](/getcert-refresh/1.md) [**getcert-rekey**(1)](/getcert-rekey/1.md) [**getcert-remove-ca**(1)](/getcert-remove-ca/1.md) [**getcert-request**(1)](/getcert-request/1.md) [**getcert-resubmit**(1)](/getcert-resubmit/1.md) [**getcert-start-tracking**(1)](/getcert-start-tracking/1.md) [**getcert-status**(1)](/getcert-status/1.md) [**getcert-stop-tracking**(1)](/getcert-stop-tracking/1.md) [**certmonger-certmaster-submit**(8)](/certmonger-certmaster-submit/8.md) [**certmonger-dogtag-ipa-renew-agent-submit**(8)](/certmonger-dogtag-ipa-renew-agent-submit/8.md) [**certmonger-dogtag-submit**(8)](/certmonger-dogtag-submit/8.md) [**certmonger-ipa-submit**(8)](/certmonger-ipa-submit/8.md) [**certmonger-local-submit**(8)](/certmonger-local-submit/8.md) [**certmonger-scep-submit**(8)](/certmonger-scep-submit/8.md) **certmonger\_selinux**(8)