---
name: "pki-pkcs12-cert"
section: "1"
platform: "linux"
package: "pki-tools"
version: "10.10.2-3"
release: "Debian 11 (Bullseye)"
platforms: ["linux"]
url: "https://new.carta.tech/pki-pkcs12-cert"
---

# pki-pkcs12-cert(1)

Command-line interface for managing individual certificates in PKCS #12 file.

## NAME

pki-pkcs12-cert - Command-line interface for managing individual certificates in PKCS #12 file.

## SYNOPSIS

**pki** \[*CLI-options*\] **pkcs12-cert**\
 **pki** \[*CLI-options*\] **pkcs12-cert-find** \[*command-options*\]\
 **pki** \[*CLI-options*\] **pkcs12-cert-export** *nickname* \[*command-options*\]\
 **pki** \[*CLI-options*\] **pkcs12-cert-import** *nickname* \[*command-options*\]\
 **pki** \[*CLI-options*\] **pkcs12-cert-mod** *nickname* \[*command-options*\]\
 **pki** \[*CLI-options*\] **pkcs12-cert-del** *nickname* \[*command-options*\]

## DESCRIPTION

The **pki pkcs12-cert** commands provide command-line interfaces to manage certificates in a PKCS #12 file.

**pki** \[*CLI-options*\] **pkcs12-cert-find** \[*command-options*\]\
\
     This command is to list certificates in a PKCS #12 file.

**pki** \[*CLI-options*\] **pkcs12-cert-export** *nickname* \[*command-options*\]\
\
     This command is to export a certificate from a PKCS #12 file.

**pki** \[*CLI-options*\] **pkcs12-cert-import** *nickname* \[*command-options*\]\
\
     This command is to import a certificate into a PKCS #12 file.

**pki** \[*CLI-options*\] **pkcs12-cert-mod** *nickname* \[*command-options*\]\
\
     This command is to modify a certificate in a PKCS #12 file.

**pki** \[*CLI-options*\] **pkcs12-cert-del** *nickname* \[*command-options*\]\
\
     This command is to delete a certificate from a PKCS #12 file.

## OPTIONS

The CLI options are described in **[pki(1)](/pki/1.md)**.

## OPERATIONS

To view available profile commands, type **pki pkcs12-cert**. To view each command's usage, type **pki pkcs12-cert-lt;commandgt; --help**.

All **pki pkcs12-cert** commands require a PKCS #12 file and its password. The PKCS #12 file can be specified with the **--pkcs12-file** parameter. The password can be specified either directly with the **--pkcs12-password** parameter, or in a file with the **--pkcs12-password-file** parameter.

Some **pki pkcs12-cert** commands require an NSS database and its password. The NSS database location can be specified with the **-d** parameter (default:  /.dogtag/nssdb). The NSS database password can be specified with the **-c** or the **-C** parameter.

### Viewing certificates in a PKCS #12 file

To list the certificates in a PKCS #12 file:

```
$ pki pkcs12-cert-find <PKCS #12 file> <PKCS #12 password>
```

### Exporting a certificate from a PKCS #12 file

To export a certificate from a PKCS #12 file into a file in PEM format:

```
$ pki pkcs12-cert-export <nickname> <PKCS #12 file> <PKCS #12 password> <cert file>
```

The certificate file can be specified with the **--cert-file** parameter.

### Importing a certificate into a PKCS #12 file

To import a certificate including its key and trust flags from an NSS database into a PKCS #12 file:

```
$ pki <NSS database location> <NSS database password> pkcs12-cert-import <nickname> \
    <PKCS #12 file> <PKCS #12 password>
```

If the PKCS #12 file does not exist, it will be created automatically. If the PKCS #12 file already exists, the certificate will be added into the file.

The trust flags can be overwritten with the **--trust-flags** parameter. If the key is not needed, specify the **--no-key** parameter.

### Modifying a certificate in a PKCS #12 file

To modify the trust flags of a certificate in a PKCS #12 file:

```
$ pki pkcs12-cert-mod <nickname> <PKCS #12 file> <PKCS #12 password> <trust flags>
```

The trust flags can be specified with the **--trust-flags** parameter.

### Deleting a certificate from a PKCS #12 file

To delete a certificate and its key from a PKCS #12 file:

```
$ pki pkcs12-cert-del <nickname> <PKCS #12 file> <PKCS #12 password>
```

## SEE ALSO

**[pki-pkcs12(1)](/pki-pkcs12/1.md)**

## AUTHORS

Endi S. Dewata lt;edewata@redhat.comgt;.

## COPYRIGHT

Copyright (c) 2016 Red Hat, Inc. This is licensed under the GNU General Public License, version 2 (GPLv2). A copy of this license is available at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.