Certificates commands

desc

describe

Describe a certificate's details.

download or save

Download a certificate for the provided certificate id, keypair ID or keypair alias. The downloaded file will not have the private key. If a file exists with the same name in the output directory, this process will overwrite it.

import

Import a certificate for a keypair.

ls

list

List certificates.

profile

Manage certificate profiles.

--cert-hash-alg string

The certificate hash algorithm types are SHA1, SHA256, SHA384 or SHA512. The default algorithm type is SHA1. 

Format:

--cert-hash-alg="<value>"

--cert-hash-encoding string

The certificate hash encoding types are HEX or BASE64. The default encoding type is HEX. 

Format:

--cert-hash-encoding="<value>"

--account-id string

Account ID for the user. 

Format:

--account-id="<value>"

-h

--help

Help for describe certificate.

-c

--chain

Download the complete certificate chain.

-f

--format string

Allowed formats include pem, der, p12 or pfx. The default format is pem. The private key will not be downloaded. 

Format:

--format="<value>"

--keypair-alias string

Download the default certificate for a keypair alias. 

Format:

--keypair-alias="<value>"

--keypair-id string

Download the default certificate for a keypair ID. 

Format:

--keypair-id="<value>"

-n

--name string

Name of the certificate file. The default name is the certificate alias. 

Format:

--name="<value>"

-o

--out string

Output path where the certificate is to be downloaded. 

Format:

--out="<value>"

-p

--password string

Password to be used in case of p12 or pfx format. The default is “changeit”. 

Format:

--password="<value>"

--account-id string

Account ID for the user. 

Format:

--account-id="<value>"

--issuer-first

By default, the end entity certificate is placed first when downloading complete chain. Setting this option to put the Root CA first.

-h

--help

Help for download.

--der

Import certificate in der format. The default format is pem.

--set-as-default

Set this certificate as the default certificate for the keypair specified.

--account-id string

Account ID for the user. 

Format:

--account-id="<value>"

-h

--help

Help for import command.

desc

describe

Describe a certificate profile.

ls

list

List certificate profiles.

-f

--filter stringToString

Filters based on field=value, supported fields(name). The default is []. (List subcommand only)

Format:

--filter="<value>"

--account-id string

Account ID for the user. (Describe and list subcommands)

Format:

--account-id="<value>"

--page int

Page number. Default is –1, which lists all pages. (List subcommands only)

--size int

Page size. Default is 100. (List subcommands only)

-h

--help

Help for certificate profiles. (Describe and list subcommands)

--cert-hash-alg string

Specify if you only want to list the certificates with the hash algorithm type: SHA1, SHA256, SHA384 or SHA512. Default is SHA1. 

Format:

--cert-hash-alg="<value>"

--cert-hash-encoding string

Specify if you want the certificate hash encoding type to be HEX or BASE64. Default is HEX. 

Format:

--cert-hash-encoding="<value>"

--filter stringToString

The supported fields are: id, alias, certificate_status, and keypair_id. The default field is []. 

Format:

--filter="<value>"

--account-id string

Account ID for the user. 

Format:

--account-id="<value>"

--page int

Page number. Default is -1, which lists all pages.

--size int

Page size. Default page size is 100.

-h

--help

Help for list certificates command.