Listing certificates for a queue manager

You can list the certificates that are stored in the key repository of a queue manager by using the listcert command on the command line. All certificates are listed, including self-signed certificates, CA-signed certificates, and CA certificates.

1. Enter the IBM® MQ administration mode by entering the following command:

   mqcli

2. List the certificates in one of the following ways:
   • List all the certificates by entering the following command:

     listcert -m QMgrName

     Where:

     QMgrName

     Specifies the name of the queue manager that you want to list the certificates for.

   • List all the certificates and the valid-from and valid-to dates of those certificates by entering the following command:

     listcert -m QMgrName -expiry

     Where:

     QMgrName

     Specifies the name of the queue manager that you want to list the certificates for.

   • List all the certificates and the valid-from and valid-to dates of certificates that expire within a specified number of days by entering the following command:

     listcert -m QMgrName -expiry Days

     Where:

     QMgrName

     Specifies the name of the queue manager that you want to list the certificates for.

     Days

     Specifies that the valid-from and valid-to dates are displayed for certificates that expire within that number of days.

3. Optional: Exit the IBM MQ administration mode by entering the following command:

   exit