Provides all the functions necessary to install and manage root certificates from any Certification Authority (CA) as entries in the root certificate store of an OpenEdge client machine (located in OpenEdge-Install-Dir\certs).
Operating system Syntax
UNIX

Windows

 
certutil [ -brief | -verbose ] 
  {   [ -format { DER | PEM }] -display cert-file 
    |[ -format { DER | PEM }] -import cert-file     
    | -list [alias...] 
    | -remove alias... 
  }
-brief
Provides less information or as specified for the function.
-verbose
Provides more information or as specified for the function.
-format { DER | PEM }
Specifies the certificate format for the -import and -display functions. The default input format for a certificate is Privacy Enhanced Mail (PEM). Because some CAs issue root digital certificates in a binary format (DER), you must specify -format DER to import these certificates.
-display cert-file
Displays the digital certificate file information contained in the operating system disk file, cert-file. You must specify cert-file as a fully qualified operating system file path name. The -verbose option displays complete certificate information, and the -brief option displays less certificate information for each certificate store entry.
-import cert-file
Imports a trusted CA digital certificate from the disk file cert-file. The cert-file argument must specify a fully qualified operating system file pathname. The function creates a root certificate store entry with a generated alias name and displays that alias name for view (specified by alias for other functions of this command).
Note:

If you installed a later version of OpenEdge, the root certificates must be reimported from the previous version.

All root digital certificate store entry alias names are exactly eight hexadecimal characters in length and have a .0 (dot-zero) file extension. All other files in the root certificate store are ignored.

-list [alias...]
Displays a list of certificate store entries identified by each alias name (alias). You can specify multiple aliases, but you cannot use wild cards. If you specify no alias, certutil displays all entries in the certificate store. The -verbose option displays complete certificate information and the -brief option displays less certificate information per keystore entry.
-remove alias...
Removes one or more certificate store entries that you specify by their alias. You cannot use wild cards. Moves each specified certificate store entry into the backup subdirectory and overwrites any previous backup subdirectory entry with the same alias name.

For more information on managing root certificates in the OpenEdge root certificate store, see Manage OpenEdge Keys and Certificates.