`autonomy cert list`¶

List and inspect TLS certificate files

Synopsis¶

Inspect one or more TLS certificate PEM files.

Prints identity (Subject CN), file path, expiry date, days remaining,
and status (ok / expiring / expired) for each certificate.

Use --expiring-within-days to filter to certificates approaching expiry.
Use 'autonomy cert rotate' to renew expiring certificates.

Required RBAC permission: cert:read or cert:manage.
Set AUTONOMY_RBAC_ENFORCEMENT=0 to disable enforcement (not recommended in production).

Usage¶

autonomy cert list [flags]

Examples¶

# Inspect a single certificate
  autonomy cert list --cert-file /etc/edge/certs/node.crt

  # Inspect multiple certs
  autonomy cert list \
    --cert-file /etc/edge/certs/node.crt \
    --cert-file /etc/edge/certs/relay.crt

  # Show only certs expiring within 30 days
  autonomy cert list \
    --cert-file /etc/edge/certs/node.crt \
    --expiring-within-days 30

Options¶

      --cert-file stringArray      certificate PEM file to inspect (may be repeated; required)
      --expiring-within-days int   only show certs expiring within N days (0 = show all)

Options inherited from parent commands¶

      --require-signed-manifest   Refuse to start if the SHA256SUMS release manifest or its cosign signature is missing/invalid (Tier 2 binary-integrity check; default: build-time compile-in via -ldflags -X, build-hardened artifacts=true, all others=false)

See also¶

autonomy cert — Manage TLS leaf certificates for edge node identity