Creating A Certificate; Adding A Certificate To The Database - Netscape MANAGEMENT SYSTEM 4.5 - COMMAND-LINE Manual

Before it creates the request file, Certificate Database Tool prompts you for a
password:
Enter Password or Pin for "Communicator Certificate DB":

Creating a Certificate

A valid certificate must be issued by a trusted CA. If a CA key pair is not available,
you can create a self-signed certificate (for purposes of illustration) with the
argument. This example creates a new, self-signed binary certificate named
, from a binary certificate request named
e95c.crt
directory.
certutil -C -i e95c.req -o e95c.crt -k e95c -m 1234
password-file
-f -x -d
The following example creates a new binary certificate named
binary certificate request named
the self-signed certificate created above,
certutil -C -m 2345 -i one.req -o one.crt -c e95c.crt -d

Adding a Certificate to the Database

This example adds a certificate to the certificate database:
certutil -A -n jsmith@netscape.com -t "C,C,C" -i e95c.crt
certdir
-d
You can see this certificate in the database with this command:
certutil -L -n jsmith@netscape.com -d
Certificate Database Tool displays output similar to the following:
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 0 (0x0)
Signature Algorithm: PKCS #1 MD5 With RSA Encryption
Issuer: CN=John Smith, O=Netscape, L=Mountain View,
ST=California, C=US
Validity:
certdir
, in the specified directory. It is issued by
one.req
e95c.crt
, in the specified
e95c.req
one.crt
.
certdir
Chapter 11 Certificate Database Tool
Examples
-x
, from a
certdir
73