[Contents] [Index]

Options

The following options are available:

• -h

  Displays a short help.

• -verbose

  Gives more diagnostic output.

• -quiet

  Gives no diagnostic output.

• -auto

  The next input file type is auto-detected (default).

• -cert

  The next input file is a certificate.

• -crmf

  The next input file is a CRMF certification request.

• -req

  The next input file is a PKCS #10 certification request.

• -crl

  The next input file is a CRL.

• -prv

  The next input file is a private key.

• -ssh2

  The next input file is an SSH2 public key.

• -spkac

  The next input file is a Netscape-generated SPKAC request.

• -noverify

  Does not check the validity of the signature on the input certificate.

• -autoenc

  Determines PEM/DER automatically (default).

• -pem

  Assumes that the input file is in PEM (ASCII base-64) format. This option allows both actual PEM (with headers and footers), and plain base-64 (without headers and footers). An example of PEM header and footer is shown below:

  -----BEGIN CERTIFICATE-----
  encoded data
  -----END CERTIFICATE-----
  

• -der

  Assumes that the input file is in DER format.

• -hexl

  Assumes that the input file is in Hexl format. (Hexl is a common Unix tool for outputting binary files in a certain hexadecimal representation.)

• -skip n

  Skips n bytes from the beginning of input before trying to decode. This is useful if the file contains some garbage before the actual contents.

• -ldap

  Prints names in LDAP order.

• -utf8

  Prints names in UTF-8.

• -latin1

  Prints names in ISO-8859-1.

• -base10

  Outputs big numbers in base-10 (default).

• -base16

  Outputs big numbers in base-16.

• -base64

  Outputs big numbers in base-64.

• -width w

  Sets output width (w characters).