PKI Server CA CRL Record CLI

Overview

The pki-server ca-crl-record-* commands provide an interface to manage CRL records in CA database.

Availability: Since PKI 11.7.

Displaying CRL Record

$ pki-server ca-crl-record-show MasterCRL
  CRL Number: 0x2
  CRL Size: 1
  This Update: Fri Jun 27 14:21:43 UTC 2025
  Next Update: Fri Jun 27 17:00:00 UTC 2025

Listing Revoked Certificates

$ pki-server ca-crl-record-cert-find MasterCRL
  Serial Number: 0xf33ddee432582b596d75efbdc4f48974
  Revoked On: Fri Jun 27 14:21:43 UTC 2025
  Reason: CERTIFICATE_HOLD

See Also

• CA CRL Database