show crypto pki ta-profile

Description

Shows a list of all configured TA profiles, or detailed information for a specific profile.

Command context

config

Parameters

<TA-NAME>

Specify the name of a TA profile. Range: 1 to 32 alphanumeric characters (excluding ").

Authority

Administrators

Examples

Showing all configured TA profiles:

switch(config)# show crypto pki ta-profile
Profile Name                     TA Certificate     Revocation Check
-------------------------------- ------------------ ---------------- 
BASE_CA                          Installed,valid    None 
BASE02_CA                        Installed,expired  None 
my-root-cert                     Installed,valid    OCSP  
ROOT-A_CA                        Not Installed      OCSP

Showing detailed information for the TA profile my-root-cert:

switch(config)# show crypto pki ta-profile my-root-cert
  TA Profile Name: my-root-cert
  Revocation Check: OCSP
    OSCP URL1: http://ocsp1.mysite.com
    OCSP URL2: Not Configured
  TA Certificate: Installed and Valid
    Version: 3 (0x2)
    Serial Number:
       74:e6:6d:22:3f:52:cc:94:43:41:ab:66:a8:8d:47:b1
    Signature Algorithm: sha1withRSAEncryption
    Issuer: OU=DeviceTrust, OU=Operations, O=MySite, C=US,
            CN=MySite Trusted Computing Root CA 1.0
    Validity
       Not Before: Sep 14 03:12:06 2007 GMT
       Not After : Sep 14 03:21:14 2032 GMT
    Subject: OU=DeviceTrust, OU=Operations, O=MySite, C=US,
             CN=MySite Trusted Computing Root CA 1.0
    Subject Public Key Info:
       Public Key Algorithm: rsaEncryption
          RSA Public Key: (2048 bit)
          Modulus (2048 bit):
              30:0d:06:09:2a:86:48:86:f7:0d:01:01:01:05:33:
              03:82:01:0f:00:30:82:01:3a:02:82:01:01:00:ac:
              3d:60:3a:2e:ca:a4:34:db:5c:3b:6b:07:df:73:62:
              64:60:07:fa:24:2d:48:ca:d7:ee:21:04:36:f1:31:
              41:08:10:41:3a:f5:73:61:11:75:e8:44:ba:4e:8b:
              c0:2b:95:c8:34:5f:b5:46:2e:e8:22:17:49:00:9d:
              fa:8d:52:56:f6:74:8c:48:ef:b2:7d:c0:19:56:e2:
              3b:f8:62:52:2b:0c:ed:45:4a:c1:1b:0f:dc:54:3a:
              f0:c4:cb:0c:70:01:5a:a7:ee:f5:12:e6:44:d3:d3:
              fe:ad:75:1d:7c:05:94:3a:44:5d:a6:df:4f:86:cf:
              53:d8:dc:75:e5:71:62:42:56:c0:d6:ad:e8:77:2f:
              ef:05:17:fc:7c:04:a3:9d:1e:7c:7b:46:2a:65:01:
              a4:8c:24:c6:e1:7b:17:68:23:dc:d8:db:f6:ba:9f:
              42:08:c0:df:5c:f4:d4:6a:dd:94:88:b8:37:78:52:
              46:27:4b:e2:99:8c:4f:9f:54:53:c1:38:50:ba:0f:
              8a:a2:ae:4b:02:fc:4a:fe:de:67:b7:1a:30:85:cc:
              20:c8:df:63:14:5a:e8:d3:ea:83:d8:47:a3:b5:2e:
              bb:64:51:f0:be:13:b6:91:e4:32:45:58:5e:1f:0d:
              af:36:94:01:43:06:de:0a:44:64:ae:51:f4:bd:b1:
              02:03:01:00:01
          Exponent: 65537 (0x10001)
    X509v3 extensions:
       X509v3 Key Usage:
          Digital Signature, Certificate Signing, CRL Signing
       X509v3 Basic Constraints:
          CA:TRUE, pathlen:4
       X509v3 Subject Key Identifier:
          eb:d7:ec:db:8a:cb:f2:51:d5:06:e1:42:7b:39:a7:d0:1e:31:6e:bf

    Signature Algorithm: sha1withRSAEncryption
       1c:90:f3:a4:f0:0d:e2:e3:e9:ae:01:e1:7d:a7:13:e2:cc:0b:
       17:31:26:92:a2:5d:1d:19:60:54:03:13:9b:e1:73:6c:e4:b3:
       01:4f:4e:ae:61:bd:ae:b6:12:d3:ab:08:ae:8c:47:92:d7:0d:
       fb:38:58:0d:47:5c:da:ed:1e:44:2c:a1:3a:ca:3f:28:df:29:
       98:6d:e4:df:1e:b7:c7:13:74:ee:aa:17:96:b5:fb:00:32:d7:
       01:d2:2d:95:0c:c6:e9:78:9b:aa:52:0a:e3:e3:a0:fc:e9:91:
       3a:2b:97:ae:11:e5:f8:5b:91:75:9a:1e:47:32:10:f9:91:8d:
       53:d3:9e:9e:e9:a2:ed:ec:e4:55:28:80:71:63:99:58:0e:6c:
       70:a7:2f:bc:79:f5:5a:72:09:ed:24:58:aa:c1:13:0f:ea:62:
       69:6f:d9:bc:7c:61:97:e5:2a:a5:70:d3:74:dc:f0:08:74:ca:
       bf:78:8c:5d:9c:48:07:59:ee:9a:f2:6c:3d:1d:12:35:74:e2:
       eb:09:17:38:73:5f:91:8b:7f:f4:28:2e:e9:12:8f:3e:71:0d:
       ca:cf:11:78:55:6d:06:49:fa:d4:8d:f3:ef:7f:79:38:35:5d:
       16:5a:57:7f:a8:dc:b0:f8:a2:04:0d:17:0b:bb:58:32:30:e0:
       2d:a8:37:a2