# diagrid workflow archive print-certs

Print the certificates that signed a workflow archive

### Description

Print the certificates that signed a workflow history archive, as text.

Two sets are printed: the certificates the archive's own signatures were made
with, and the external certificates it carries to verify attestations propagated
from child workflows and activities. Each is decoded from its signed raw bytes —
the source of truth — and printed with its SPIFFE identity and the full chain up
to the issuing Sentry CA.

An archive whose history is unsigned carries no certificates, and the command
says so. It does not verify signatures — use "diagrid workflow archive verify"
for that, and "diagrid workflow archive trust-anchor" to print the CA bundle
these certificates chain to.

```
diagrid workflow archive print-certs <archive-file> [flags]
```

### Examples

```

  # Print the signing certificates in an archive
  diagrid workflow archive print-certs wf-123.json

  # Read the archive from stdin
  cat wf-123.json | diagrid workflow archive print-certs -

```

### Options

```
  -h, --help   help for print-certs
```

### Options inherited from parent commands

```
      --api-key string   Diagrid Cloud API key
```

### SEE ALSO

- [diagrid workflow archive](./archive.md)	 - Work with workflow history archives