Hello Everyone,

I am having some trouble understanding the options to "ipa cert-find" that refer to searching for certs not valid after a certain date. I'm sure I'm just missing something important, but I was hoping someone could explain them to me.

Use case: I want to list all currently-valid certs that won't be valid after March 31st, 2019.

I tried "ipa cert-find --validnotafter-to=2019-03-31" but that shows certs that are currently invalid. I also tried adding "--revokedon-from=" or "--revokedon-to=" but couldn't find what I was looking for.

Is there a way to do this with "ipa cert-find" or should I be looking for a different tool? Should I be piping this into something else instead?

Thanks for your help,

Anthony