getcert list-cas -c CA doesn't return an error if not found
root@samba1:~# getcert list-cas -c EARTH-ROOT-CA CA 'EARTH-ROOT-CA': is-default: no ca-type: EXTERNAL helper-location: /usr/libexec/certmonger/cepces-submit --server=WIN-DC01.earth.milkyway.site --auth=Kerberos root@samba1:~# echo $? 0 root@samba1:~# getcert list-cas -c EARTH-ROOT-CAXX root@samba1:~# echo $? 0
The exit code should be 1 in that case.