Hello,

Are there any possibilities to fetch certificates from the IPA that are (1) valid, (2) will expire in 20 (for example) days?

ipa cert-find --validnotafter-to=`date -d "+20 days" "+%Y-%m-%d"

shows revoked serts,  unfortunately. May be some ldapsearch?

--

With best regards,
Andrey Bondarenko
mail:me@andreybondarenko.com
https://andreybondarenko.com
skype:andrey.bondarenko
phone, Telegram, WhatsApp, etc:+420-773-591-443

7758 40AC 88CC 96C9 0C9A 9EE4 3B72 547B 7538 D41B