Usage - Netscape MANAGEMENT SYSTEM 6.0 - COMMAND-LINE Manual

Usage

Table 11-1 Command options and their arguments (Continued)
-3
-4
Usage
Certificate Database Tool's capabilities are grouped as follows, using these
combinations of options and arguments. Options and arguments in square brackets
are optional, those without square brackets are required.
• Creating a new
-N [-d
• Creating a new certificate and adding it to the database with one command:
-S -k
[-c
[-m
[-d
• Making a separate certificate request:
-R -k
[-d
• Creating a new binary certificate from a binary certificate request:
-C [-c
[-h
[-v
[-4]
72 Netscape Certificate Management System Command-Line Tools Guide • March 2002
Add an authority key ID extension to a certificate that is being created or
added to a database. This extension supports the identification of a
particular certificate, from among multiple certificates associated with one
subject name, as the correct issuer of a certificate. Certificate Database Tool
will prompt you to select the authority key ID extension. Authority key ID
extensions are described under "Standard X.509 v3 Certifiate Extensions' in
Appendix C of CMS Plug-Ins Guide.
Add a CRL distribution point extension to a certificate that is being created
or added to a database. This extension identifies the URL of a certificate's
associated certificate revocation list (CRL). Certificate Database Tool
prompts you to enter the URL.
cert7.db
certdir
]
shortkeyID
-y rsa|dsa -n
issuer trustargs
|-x] -t
serial-number valid-months
] [-v
certdir phone
] [-p ] [-f
shortkeyID
-y rsa|dsa -s
certdir phone
] [-p ] [-o
issuer shortkeyID
|-k
tokenname cert-request-file
] -i
valid-months offset-months
] [-w
file:
certname
-s
tokenname
[-h ]
offset-months
] [-w
password-file
] [-1] [-2] [-3] [-4]
subject
[-h
output-file
] [-f
-y rsa|dsa -x] [-f
output-file
-o
certdir
] [-d
subject
]
tokenname
]
password-file
]
password-file
]
serial-number
[-m ]
] [-1] [-2] [-3]