pki---dn(1)

pki---dn1

Extract the subject dn of an x.509 certificate

Usage

pki --dn [--in file] [--format format] [--debug level]

pki --dn --options file

pki {--dn -h | --help}

Overview

This sub-command of pki(1) extracts the ASN.1-encoded subject DistinguishedName (DN) of an X.509 certificate and exports it in different formats. This may be useful when strongSwan's identity parser is unable to produce the correct binary encoding from a string.

Options

-h, --help

Print usage information with a summary of the available options.

-v, --debug level

Set debug level, default: 1.

-+, --options file

Read command line options from file.

-i, --in file

Input file. If not given the input is read from STDIN.

-t, --format format

Output format. One of config (strongSwan configuration compatible), hex (hexadecimal encoding, no prefix), base64 (Base64 encoding, no prefix), bin (raw binary data), defaults to config.

Releases

6 releases since Debian 9 (Stretch); the text changed 5 times.

  1. 9
  2. 10
  3. 11
  4. 12
  5. 13
  6. Arch

From strongswan 6.1.0-2 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.