STOREUTL(1SSL)                      OpenSSL                     STOREUTL(1SSL)

       openssl-storeutl, storeutl - STORE utility

       openssl storeutl [-help] [-out file] [-noout] [-passin arg] [-text arg]
       [-engine id] [-r] [-certs] [-keys] [-crls] [-subject arg] [-issuer arg]
       [-serial arg] [-alias arg] [-fingerprint arg] [-digest] uri ...

       The storeutl command can be used to display the contents (after
       decryption as the case may be) fetched from the given URIs.

           Print out a usage message.

       -out filename
           specifies the output filename to write to or standard output by

           this option prevents output of the PEM data.

       -passin arg
           the key password source. For more information about the format of
           arg see the PASS PHRASE ARGUMENTS section in openssl(1).

           Prints out the objects in text form, similarly to the -text output
           from openssl x509, openssl pkey, etc.

       -engine id
           specifying an engine (by its unique id string) will cause storeutl
           to attempt to obtain a functional reference to the specified
           engine, thus initialising it if needed.  The engine will then be
           set as the default for all available algorithms.

       -r  Fetch objects recursively when possible.

           Only select the certificates, keys or CRLs from the given URI.
           However, if this URI would return a set of names (URIs), those are
           always returned.

       -subject arg
           Search for an object having the subject name arg.  The arg must be
           formatted as /type0=value0/type1=value1/type2=....  Keyword
           characters may be escaped by \ (backslash), and whitespace is
           retained.  Empty values are permitted but are ignored for the
           search.  That is, a search with an empty value will have the same
           effect as not specifying the type at all.

       -issuer arg
       -serial arg
           Search for an object having the given issuer name and serial
           number.  These two options must be used together.  The issuer arg
           must be formatted as /type0=value0/type1=value1/type2=...,
           characters may be escaped by \ (backslash), no spaces are skipped.
           The serial arg may be specified as a decimal value or a hex value
           if preceded by 0x.

       -alias arg
           Search for an object having the given alias.

       -fingerprint arg
           Search for an object having the given fingerprint.

           The digest that was used to compute the fingerprint given with


       The openssl storeutl app was added in OpenSSL 1.1.1.

       Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.

       Licensed under the OpenSSL license (the "License").  You may not use
       this file except in compliance with the License.  You can obtain a copy
       in the file LICENSE in the source distribution or at

1.1.1f                            2023-10-10                    STOREUTL(1SSL)
Man Pages Copyright Respective Owners. Site Copyright (C) 1994 - 2024 Hurricane Electric. All Rights Reserved.