display pki certificate

Syntax

display pki certificate { { ca | local } domain domain-name | request-status } [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

ca: Displays the CA certificate.

local: Displays the local certificate.

domain-name: Name of the PKI domain, a string of 1 to 15 characters.

request-status: Displays the status of a certificate request.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display pki certificate to display the contents or request status of a certificate.

Related commands: certificate request polling, pki domain, and pki retrieval-certificate.

Examples

# Display the local certificate.

<Sysname> display pki certificate local domain 1
Certificate:
    Data: 
        Version: 3 (0x2)
        Serial Number: 
            10B7D4E3 00010000 0086
        Signature Algorithm: md5WithRSAEncryption
        Issuer: 
            emailAddress=myca@aabbcc.net
            C=CN
            ST=Country A
            L=City X
            O=abc
            OU=bjs
            CN=new-ca
        Validity
            Not Before: Jan 13 08:57:21 2012 GMT
            Not After : Jan 20 09:07:21 2012 GMT
        Subject: 
            C=CN
            ST=Country B
            L=City Y
            CN=pki test
        Subject Public Key Info: 
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (512 bit)
                Modulus (512 bit): 
                    00D41D1F …
                Exponent: 65537 (0x10001)
        X509v3 extensions: 
            X509v3 Subject Alternative Name: 
            DNS: hyf.xxyyzz.net
            X509v3 CRL Distribution Points:
            URI:http://1.1.1.1:447/myca.crl
            …          …
    Signature Algorithm: md5WithRSAEncryption
        A3A5A447 4D08387D …