After a number of certificates have been issued using the tool, it should be possible to show status of currently issued artefacts.

The following should be done:

• Implement status command.
• Status command should:
  • Display information about CA hierarchy as follows:
    • Make sure the section is clearly indicating that it describes the CA hierarchy.
    • List CAs in order of their seniority (self-signed at top, leaf CA at bottom).
    • Show subject DN of each CA certificate
    • Show CA certificate validity.
    • CA certificates with wrong validity should be clearly indicated as such (not valid yet, expired).
    • Display paths to certificates.
    • Mark the issuing (leaf) CA in some way for users to be aware that it is the one used for issuance of certificates.
  • Display information about all issued server certificates as follows:
    • Make sure information resides within its own section on screen, clearly indicating it is showing information about server certificates.
    • Show subject DN of each server certificate.
    • Show DNS subject alternative names.
    • Show validity.
    • Server certificates with wrong validity should be clearly indicated as such (not valid yet, expired).
  • Display information about all issued client certificates as follows:
    • Make sure information resides within its own section on screen, clearly indicating it is showing information about client certificates.
    • Show subject DN of each client certificate.
    • Show validity.
    • Client certificates with wrong validity should be clearly indicated as such (not valid yet, expired).
• Status command should not accept any positional or optional arguments.
• Status command should be implemented with the following constraints in mind:
  • Validity time should be shown in UTC.
  • Example usage in CLI help should be updated to cover the new command.

Documentation should cover:

• Command usage.
• What timezone is used for displaying validities.
• Example output.