The -setdefault option can be used to set a certificate as the default certificate in the Key Database file. In this example, the "example.com" certificate will be set as the default certificate.

${install_root}/gsk8/bin/gsk8capicmd_64
-cert
-setdefault
-db /path/to/example.kdb
-stashed or -pw your_password
-label "example.com"

You can list the certificates in the key database to determine which certificate is the default certificate. In this example, the certificate named "example.com" is the default certificate.

Certificates found
* default, - personal, ! trusted, # secret key
* example.com
- bogus.com