Ikeycmd
IKEYCMD is Java-based tool that can be used to manage keys, certificates and certificate requests. It can create certificate requests, import CA signed certificates and manage self-signed certificates. Use IKEYCMD for configuration tasks related to public-private key creation and management.
Example 1: To get list of certificates in client key database file
sdsva.example.com :tools> ikeycmd -cert -list -db clientc.kdb -pw client
Certificates in database /userdata/directory/Certificates/clientc.kdb:
client_cert
server_certExample 2: To get details of specific certificate in client key database file
sdsva.example.com :tools> ikeycmd -cert -details -db clientc.kdb -pw client -label client_cert
Label: client_cert
Key Size: 2048
Version: X509 V3
Serial Number: 49 F8 8D B0 60 5B 62 62
Issued by: CN=sdsva.example.com
Subject: CN=sdsva.example.com
Valid: From: Wednesday, May 16, 2018 12:08:38 PM IST To: Monday, May 16, 2022 12:08:38 PM IST
Fingerprint:
SHA1: 3C:54:14:23:EE:8C:F8:63:0F:A7:34:AF:8B:67:0B:F6:0D:7D:D8:01
SHA256: BA:48:2A:55:04:7C:14:F7:19:47:26:98:0F:55:B8:3B:0A:C0:9F:C9:95:9E:4B:79:62:AA:89:75:BC:40:D3:44
Extensions:
- AuthorityKeyIdentifier: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 51 d4 ad 3a 9c 74 8d 3e e8 a8 aa 1d b3 f9 5c 55 Q....t.........U
0010: a3 32 f4 57 .2.W
]
]
- SubjectKeyIdentifier: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 51 d4 ad 3a 9c 74 8d 3e e8 a8 aa 1d b3 f9 5c 55 Q....t.........U
0010: a3 32 f4 57 .2.W
]
]
Signature Algorithm: SHA256withRSA (1.2.840.113549.1.1.11)
Trust Status: enabled