Managing a list of trusted certificates

To add a certificate to the trusted certificate list, run the following command:

kesl-control --add-certificate <path to certificate>

where:

<path to certificate> is the path to the certificate file that you want to add (PEM or DER format).

To remove a certificate from the trusted certificate list, run the following command:

kesl-control --remove-certificate <certificate subject>

To view the list of trusted certificates, execute the following command:

kesl-control --list-certificates

The following information is displayed for each certificate:

• certificate subject
• serial number
• certificate issuer
• certificate start date
• certificate expiration date
• SHA256 certificate fingerprint