---
name: "pkcs11_inspect"
section: "1"
platform: "linux"
package: "libpam-pkcs11"
version: "0.6.13-1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/pkcs11_inspect"
---

# pkcs11\_inspect(1)

print certificate contents

## NAME

pkcs11\_inspect - print certificate contents

## SYNOPSIS

**pkcs11\_inspect** \[**debug**\] \[**config\_file=*\<filename\>***\]

## DESCRIPTION

**pkcs11\_inspect** uses the pam\_pkcs11 library infrastructure to get the content of a certificate and display it.

**pkcs11\_inspect** uses the same configuration file and arguments than [**pam\_pkcs11**(8)](/pam_pkcs11/8.md) PAM module. It loads defined mapper modules, and use them to look into the certificate for required entries (ie: ms\_mapper looks for ms UPN entries, and so on).

When a mapper module finds a proper entry in the certificate, it converts to UTF-8 and print it to stdout.

## OPTIONS

- **debug**

  Enable debugging output.

- **config\_file=*\<filename\>***

  Sets the configuration file to use. Default value is */etc/pam\_pkcs11/pam\_pkcs11.conf*.

As it uses the same configuration file as pam\_pkcs11, all pam\_pkcs11 options are also available. Note that some of them have no sense in a non-PAM environment, so they will be ignored. Some mapper options (mapfile, ignorecase) have no effect on certificate contents, so they will be ignored too.

## RETURN VALUE

On success **pkcs11\_inspect** prints on stdout all certificate contents that are found for mappers and returns 0.

On error it returns 1.

## FILES

*/etc/pam\_pkcs11/pam\_pkcs11.conf*

## EXAMPLES

To run this program the standard way, insert a smart card in the reader and type:

 pkcs11\_inspect

Alternatively you can specify options:

 pkcs11\_inspect debug config\_file=${HOME}/.pam\_pkcs11.conf

## AUTHORS

Juan Antonio Martinez \<jonsito@teleline.es\>

## SEE ALSO

[**pam\_pkcs11**(8)](/pam_pkcs11/8.md), [**pklogin\_finder**(1)](/pklogin_finder/1.md)\
 PAM-PKCS11 User Manual