====== Display certificates ======

===== Synopsis =====

    certstat [--subject <subject>]

===== Examples =====

=== Display all certificates ===

    certstat

=== Display certificates matching the subject "forum.ipxe.org" ===

    certstat --subject forum.ipxe.org

===== Description =====

Display details of the specified certificates in the certificate store.  If no subject name is specified, iPXE will display details of all stored certificates.

The output will show key information about each certificate.  For example:

    iPXE> certstat
    iPXE root CA : 9b04dd0795e78dae540d550281065f203c9afd42 [VALIDATED]
    www.fensystems.co.uk : 9a56b9dd964aeaa1c42e93dada9b1bdf2f31d5f7 [VALIDATED]

In this example you can see that there are two stored certificates, both of which have been validated.  The subject common names and SHA-1 fingerprints are shown for each certificate.

There are several flags that may appear for each certificate:

^ [VALIDATED]  | The certificate has been validated.  |
^ [PERMANENT]  | The certificate was [[:crypto#embedded_certificates|embedded]] into iPXE at build time.  |
^ [EXPLICIT]   | The certificate was added explicitly using the ''[[:cmd:certstore]]'' command.  |

===== See also =====

  * ''[[:cmd:certstore]]''
  * ''[[:cmd:certfree]]''
  * iPXE [[:crypto|cryptography]] guide
  * [[:cmd|List of all iPXE commands]]

===== Build options =====

This command is available only when the build option ''[[:buildcfg:CERT_CMD]]'' is enabled.

===== Notes =====

The ''%%--subject%%'' option will match against the certificate's Common Name and any Subject Alternative Names, if present.