display pki certificate

Syntax

display pki certificate { { ca | local } domain domain-name | request-status } [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

ca: Displays the CA certificate.

local: Displays the local certificate.

domain-name: Name of the PKI domain, a string of 1 to 15 characters.

request-status: Displays the status of a certificate request.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display pki certificate to display the contents or request status of a certificate.

Related commands: certificate request polling, pki domain, and pki retrieval-certificate.

Examples

# Display the local certificate.

<Sysname> display pki certificate local domain 1
Certificate:
    Data: 
        Version: 3 (0x2)
        Serial Number: 
            10B7D4E3 00010000 0086
        Signature Algorithm: md5WithRSAEncryption
        Issuer: 
            emailAddress=myca@aabbcc.net
            C=CN
            ST=Country A
            L=City X
            O=abc
            OU=bjs
            CN=new-ca
        Validity
            Not Before: Jan 13 08:57:21 2012 GMT
            Not After : Jan 20 09:07:21 2012 GMT
        Subject: 
            C=CN
            ST=Country B
            L=City Y
            CN=pki test
        Subject Public Key Info: 
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (512 bit)
                Modulus (512 bit): 
                    00D41D1F …
                Exponent: 65537 (0x10001)
        X509v3 extensions: 
            X509v3 Subject Alternative Name: 
            DNS: hyf.xxyyzz.net
            X509v3 CRL Distribution Points:
            URI:http://1.1.1.1:447/myca.crl
            …          …
    Signature Algorithm: md5WithRSAEncryption
        A3A5A447 4D08387D …

Table 35: Command output

Field

Description

Version

Version of the certificate

Serial Number

Serial number of the certificate

Signature Algorithm

Signature algorithm

Issuer

Issuer of the certificate

Validity

Validity period of the certificate

Subject

Entity holding the certificate

Subject Public Key Info

Public key information of the entity

X509v3 extensions

Extensions of the X.509 (version 3) certificate

X509v3 CRL Distribution Points

Distribution points of X.509 (version 3) CRLs