OptionalkeyPath to private key for key-pair verification
OptionalformatOutput format for conversion (pem, der)
OptionaloutOutput file path for conversion
OptionaldatesDisplay validity dates only
OptionalsubjectDisplay subject DN only
OptionalissuerDisplay issuer DN only
OptionalserialDisplay serial number only
OptionalserialSerial number display format
OptionalmodulusDisplay RSA modulus (for key matching)
OptionalfingerprintDisplay SHA-1/SHA-256 fingerprints
OptionalpubkeyExtract and display public key
OptionalchainValidate certificate chain (AKI/SKI)
OptionalrawDisplay OpenSSL-style raw dump
OptionaljsonOutput as JSON (for scripting)
OptionalmatchOutput only true/false for key match verification (requires --key)
CLI options for the inspect command. Controls what information to display and output format.