Hi Team,
We have an IPA certificate expiring very soon. I do not believe that is in use, but I need to verify that. I checked in following two ways:
1, Via GUI, Identity, Services, searched for the host (which is our very first IPA server), compared each cert against the serial number of the expiring one.
2, Checked nssdb:
# certutil -L -d /etc/pki/nssdb
Certificate Nickname Trust Attributes
SSL,S/MIME,JAR/XPI
#
Are there other ways to verify this?
Thank you.
Kathy.