SQ(1)

NAME
sq export - Exports certificates from the local certificate store

SYNOPSIS
sq [GLOBAL OPTIONS] export [OPTIONS]

DESCRIPTION
Exports certificates from the local certificate store.

If multiple predicates are specified a certificate is returned if at least one of them matches.

This does not check the authenticity of the certificates in anyway. Before using the certificates, be sure to validate and authenticate them.

When matching on subkeys or User IDs, the component must have a valid self signature according to the policy. This is not the case when matching the certificate's key handle using `--cert` or when exporting all certificates.

Fails if search criteria are specified and none of them matches any certificates. Note: this means if the certificate store is empty and no search criteria are specified, then this will return success.

OPTIONS

  Global options

--cert-store=PATH
    Specifies the location of the certificate store

-f, --force=FORCE
    Overwrites existing files

--keyring=PATH
    Specifies the location of a keyring to use

--known-notation=NOTATION
    Adds NOTATION to the list of known notations

--no-cert-store=NO_CERT_STORE
    Disables the use of a certificate store

--output-format=FORMAT
    Produces output in FORMAT, if possible

--output-version=VERSION
    Produces output variant VERSION.

--pep-cert-store=PATH
    Specifies the location of a pEp certificate store

--time=TIME
    Sets the reference time as ISO 8601 formatted timestamp

--trust-root=FINGERPRINT|KEYID
    Considers the specified certificate to be a trust root

  Subcommand options

-B, --binary=BINARY
    Emits binary data

--cert=FINGERPRINT|KEYID
    Returns certificates that have the specified fingerprint or key ID

--domain=DOMAIN
    Returns certificates that have a User ID with an email address from the specified domain

--email=EMAIL
    Returns certificates that have a User ID with the specified email address, case insensitively

--grep=PATTERN
    Returns certificates that have a User ID that contains the string, case insensitively

--key=FINGERPRINT|KEYID
    Returns certificates where the primary key or a subkey has the specified fingerprint or key ID

--userid=USERID
    Returns certificates that have a User ID that matches exactly, including case

EXAMPLES

Exports all certificates.

    sq export > all.pgp

Exports certificates with a matching User ID packet. The binding

signatures are checked, but the User IDs are not authenticated.

Note: this check is case sensitive.

    sq export --userid 'Alice <alice@example.org>'

Exports certificates with a User ID containing the email address.

The binding signatures are checked, but the User IDs are not

authenticated. Note: this check is case insensitive.

    sq export --email 'alice@example.org'

Exports certificates where the certificate (i.e., the primary key)

has the specified Key ID.

    sq export --cert 1234567812345678

Exports certificates where the primary key or a subkey matches the

specified Key ID.

    sq export --key 1234567812345678

Exports certificates that contain a User ID with *either* (not

both!) email address. Note: this check is case insensitive.

    sq export --email alice@example.org --email bob@example.org

SEE ALSO
sq(1).

For the full documentation see <https://docs.sequoia-pgp.org/sq/>.

VERSION
0.30.1 (sequoia-openpgp 1.16.0, using Nettle 3.9 (Cv448: true))