---
name: "sq-key-extract-cert"
section: "1"
platform: "linux"
package: "sq"
version: "0.27.0-2+b1"
release: "Debian 12 (Bookworm)"
platforms: ["linux"]
url: "https://new.carta.tech/sq-key-extract-cert"
---

# sq-key-extract-cert(1)

Converts a key to a cert

## NAME

extract-cert - Converts a key to a cert

## SYNOPSIS

**extract-cert** \[**-o**\|**--output**\] \[**-B**\|**--binary**\] \[**-h**\|**--help**\] \[*FILE*\]

## DESCRIPTION

Converts a key to a cert

After generating a key, use this command to get the certificate corresponding to the key.  The key must be kept secure, while the certificate should be handed out to correspondents, e.g. by uploading it to a keyserver.

## OPTIONS

- **-o**, **--output**=*FILE*

  Writes to FILE or stdout if omitted

- **-B**, **--binary**

  Emits binary data

- **-h**, **--help**

  Print help information

- \[*FILE*\]

  Reads from FILE or stdin if omitted

## EXAMPLES

 First, this generates a key

```
 sq key generate --userid "<juliet@example.org>" --export juliet.key.pgp
```

 Then, this extracts the certificate for distribution

```
 sq key extract-cert --output juliet.cert.pgp juliet.key.pgp
```

## SEE ALSO

For the full documentation see \<https://docs.sequoia-pgp.org/sq/\>.

[sq(1)](/sq/1.md) [sq-armor(1)](/sq-armor/1.md) [sq-autocrypt(1)](/sq-autocrypt/1.md) [sq-certify(1)](/sq-certify/1.md) [sq-dearmor(1)](/sq-dearmor/1.md) [sq-decrypt(1)](/sq-decrypt/1.md) [sq-encrypt(1)](/sq-encrypt/1.md) [sq-inspect(1)](/sq-inspect/1.md) [sq-key(1)](/sq-key/1.md) [sq-key-adopt(1)](/sq-key-adopt/1.md) [sq-key-attest-certifications(1)](/sq-key-attest-certifications/1.md) [sq-key-generate(1)](/sq-key-generate/1.md) [sq-key-password(1)](/sq-key-password/1.md) [sq-key-userid(1)](/sq-key-userid/1.md) [sq-keyring(1)](/sq-keyring/1.md) [sq-keyserver(1)](/sq-keyserver/1.md) [sq-packet(1)](/sq-packet/1.md) [sq-revoke(1)](/sq-revoke/1.md) [sq-sign(1)](/sq-sign/1.md) [sq-verify(1)](/sq-verify/1.md) [sq-wkd(1)](/sq-wkd/1.md)