SQ(1)

NAME
sq certify - Certifies a User ID for a Certificate

SYNOPSIS
sq [GLOBAL OPTIONS] certify [OPTIONS] CERTIFIER-KEY CERTIFICATE USERID

DESCRIPTION
Certifies a User ID for a Certificate.

Using a certification a keyholder may vouch for the fact that another certificate legitimately belongs to a user id. In the context of emails this means that the same entity controls the key and the email address. These kind of certifications form the basis for the Web Of Trust.

This command emits the certificate with the new certification. The updated certificate has to be distributed, preferably by sending it to the certificate holder for attestation. See also "sq key attest-certification".

OPTIONS

  Global options

-f, --force
    Overwrites existing files

--help
    Print help information

--known-notation=NOTATION
    Adds NOTATION to the list of known notations

--output-format=FORMAT
    Produces output in FORMAT, if possible

--output-version=VERSION
    Produces output variant VERSION.

--version
    Print version information

  Subcommand options

-B, --binary
    Emits binary data

-a, --amount=TRUST_AMOUNT
    Sets the amount of trust

--allow-not-alive-certifier
    Don't fail if the certificate making the certification is not alive.

--allow-revoked-certifier
    Don't fail if the certificate making the certification is revoked.

-d, --depth=TRUST_DEPTH
    Sets the trust depth

--expires=TIME
    Makes the certification expire at TIME (as ISO 8601)

--expires-in=DURATION
    Makes the certification expire after DURATION (as N[ymwds]) [default: 5y]

--help
    Print help information

-l, --local
    Makes the certification a local certification

--non-revocable
    Marks the certification as being non-revocable

--notation=NAME
    Adds a notation to the certification.

-o, --output=FILE
    Writes to FILE or stdout if omitted

--private-key-store=KEY_STORE
    Provides parameters for private key store

-r, --regex=REGEX
    Adds a regular expression to constrain what a trusted introducer can certify

--time=TIME
    Sets the certification time to TIME (as ISO 8601)

--version
    Print version information

EXAMPLES

Juliet certifies that Romeo controls romeo.pgp and romeo@example.org

    sq certify juliet.pgp romeo.pgp "<romeo@example.org>"

SEE ALSO
sq(1).

For the full documentation see <https://docs.sequoia-pgp.org/sq/>.

VERSION
0.28.0 (sequoia-openpgp 1.13.0, using Nettle)