Netscape MANAGEMENT SYSTEM 6.0 - COMMAND-LINE Manual page 70

Syntax
Table 11-1 Command options and their arguments (Continued)
-l
serial-number
-m
certname
-n
output-file
-o
phone
-p
-r
-s subject
trustargs
-t
70 Netscape Certificate Management System Command-Line Tools Guide • March 2002
Display detailed information when validating a certificate with the -V
option.
Assign a unique serial number to a certificate being created. This operation
should be performed by a CA. The default serial number is 0 (zero). Serial
numbers are limited to integers.
Specify the nickname of a certificate to list, create, add to a database,
modify, or validate. Bracket the certname string with quotation marks if it
contains spaces.
Specify the output file name for new certificates or binary certificate
requests. Bracket the output-file string with quotation marks if it contains
spaces. If this argument is not used the output destination defaults to
standard output.
Specify a contact telephone number to include in new certificates or
certificate requests. Bracket this string with quotation marks if it contains
spaces.
Display a certificate's binary DER encoding when listing information about
that certificate with the -L option.
Identify a particular certificate owner for new certificates or certificate
requests. Bracket this string with quotation marks if it contains spaces. The
subject identification format follows RFC #1485.
Specify the trust attributes to modify in an existing certificate or to apply to
a certificate when creating it or adding it to a database.
There are three available trust categories for each certificate, expressed in
this order: "SSL, email, object signing". In each category position use zero or
more of the following attribute codes:
p Valid peer
P Trusted peer (implies p)
c Valid CA
T Trusted CA to issue client certificates (implies c)
C Trusted CA to issue server certificates (SSL only)
(implies c)
u Certificate can be used for authentication or signing
w Send warning (use with other attributes to include a warning when the
certificate is used in that context)
The attribute codes for the categories are separated by commas, and the
entire set of attributes enclosed by quotation marks. For example:
-t "TCu,Cu,Tuw"
Use the -L option to see a list of the current certificates and trust attributes
in a certificate database.