Hi Team, 

We have an IPA certificate expiring very soon. I do not believe that is in use, but I need to verify that. I checked in following two ways: 

1, Via GUI, Identity, Services, searched for the host (which is our very first IPA server), compared each cert against the serial number of the expiring one. 

2, Checked nssdb: 

# certutil -L -d /etc/pki/nssdb 


Certificate Nickname                                         Trust Attributes

                                                             SSL,S/MIME,JAR/XPI


#


Are there other ways to verify this? 


Thank you. 


Kathy.