I have been looking at how to delete expired certificates from an IOS CA. I have seen the command "crypto pki server trim" but this command appears to only apply to certificates in the CRL list. Does anyone know if there is a similar command to just delete expired certificates rather than ones that have been revoked first? It would be a hassle to have to manually go through each one.
