[Freeipa-users] Re: freeipa expired certificates

[john john]

I appreciate all the help you provide.

getcert list -d /etc/pki/pki-tomcat/alias | egrep "certificate:|expires"
        certificate: type=NSSDB,location='/etc/pki/pki-tomcat/alias',nickname='auditSigningCert cert-pki-ca',token='NSS Certificate DB'
        expires: 2024-03-05 17:47:13 UTC
        certificate: type=NSSDB,location='/etc/pki/pki-tomcat/alias',nickname='ocspSigningCert cert-pki-ca',token='NSS Certificate DB'
        expires: 2024-03-07 17:47:15 UTC
        certificate: type=NSSDB,location='/etc/pki/pki-tomcat/alias',nickname='subsystemCert cert-pki-ca',token='NSS Certificate DB'
        expires: 2024-03-05 17:47:23 UTC
        certificate: type=NSSDB,location='/etc/pki/pki-tomcat/alias',nickname='caSigningCert cert-pki-ca',token='NSS Certificate DB'
        expires: 2038-05-10 15:56:32 UTC
        certificate: type=NSSDB,location='/etc/pki/pki-tomcat/alias',nickname='Server-Cert cert-pki-ca',token='NSS Certificate DB'
        expires: 2022-04-15 04:47:25 UTC

Only one certificate expired in April - 'Server-Cert cert-pki-ca'
Why March 8 didn’t come, I don’t understand.