Available subcommands
The manage-certificates tool uses subcommands to indicate which function you want to invoke.
The subcommands that it offers include the following.
| Subcommand | Description | 
|---|---|
| 
 | Lists the certificates in a key store. | 
| 
 | Imports a certificate into a trusted certificate entry, or imports a certificate chain and private key into a private key entry. | 
| 
 | Exports a certificate from a key store. | 
| 
 | Exports a private key from a key store. | 
| 
 | Generates a self-signed certificate. | 
| 
 | Generates a certificate signing request that can be provided to a certification authority. | 
| 
 | Signs a certificate signing request with a specified issuer certificate. | 
| 
 | Checks a specified certificate in a key store to verify whether it is suitable for use as a listener certificate. | 
| 
 | Initiates the TLS negotiation process with a specified server to obtain its certificate chain to update a trust store with information needed to trust that chain. | 
| 
 | Displays the contents of a file containing one or more PEM-encoded or DER-encoded X.509 certificates. | 
| 
 | Displays the contents of a file containing a PEM-encoded or DER-encoded PKCS #10 certificate signing request (CSR). | 
| 
 | Changes the alias for an entry in a key store. | 
| 
 | Changes the password for a key store. | 
| 
 | Changes the password used to protect the private key for a specified entry in a key store. |