[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

show security pki certificate-request

Syntax

show security pki certificate-request
<brief | detail>
<certificate-id certificate-id-name >

Release Information

Command modified in Release 8.5 of JUNOS software.

Description

Display information about manually generated local digital certificate requests that are stored on the device.

This statement is supported on J-series and SRX-series devices.

Options

none—Display basic information about all local digital certificate requests.

brief | detail—(Optional) Display the specified level of output.

certificate-id certificate-id-name —(Optional) Display information about only the specified local digital certificate requests.

Required Privilege Level

view

Related Topics

clear security pki key-pair

JUNOS System Basics and Services Command Reference

List of Sample Output

show security pki certificate-request certificate-id hassan brief
show security pki certificate-request certificate-id hassan detail

Output Fields

Table 85 lists the output fields for the show security pki certificate-request command. Output fields are listed in the approximate order in which they appear.

Table 85: show security pki certificate-request Output Fields

Field Name

Field Description

Certificate identifier

Name of the digital certificate.

Certificate version

Revision number of the digital certificate.

Issued to

Device that was issued the digital certificate.

Subject

Details of the digital certificate holder organized using the distinguished name format. Possible subfields are:

  • Organization—Organization of origin.
  • Organizational unit—Department within an organization.
  • Country—Country of origin.
  • Locality—Locality of origin.
  • Common name—Name of the authority.

Alternate subject

Domain name or IP address of the device related to the digital certificate.

Public key algorithm

Encryption algorithm used with the private key, such as rsaEncryption(1024 bits).

Public key verification status

Public key verification status: Failed or Passed. The detail output also provides the verification hash.

Fingerprint

Secure Hash Algorithm (SHA1) and Message Digest 5 (MD5) hashes used to identify the digital certificate.

Use for key

Use of the public key, such as Certificate signing, CRL signing, Digital signature, or Data encipherment.

show security pki certificate-request certificate-id hassan brief

user@host> show security pki certificate-request certificate-id hassan brief
Certificate identifier: hassan
      Issued to: hassan@juniper.net
      Public key algorithm: rsaEncryption(1024 bits)

show security pki certificate-request certificate-id hassan detail

user@host> show security pki certificate-request certificate-id hassan detail
    Certificate identifier: hassan
      Certificate version: 3
      Subject:
        Organization: juniper, Organizational unit: pepsi, Country: IN,
                        Common name: hassan
      Alternate subject: 102.168.72.124
      Public key algorithm: rsaEncryption(1024 bits)
      Public key verification status: Passed
        c7:a4:fb:e7:8c:4f:31:e7:eb:01:d8:32:65:21:f2:eb:6f:7d:49:1a:c3:9b
        63:47:e2:4f:f6:db:f6:c8:75:dd:e6:ec:0b:35:0a:62:32:45:6b:35:1f:65
        c9:66:b7:40:b2:f9:2a:ab:5b:60:f7:c7:73:36:da:68:25:fc:40:4b:12:3c
        d5:c8:c6:66:f6:10:1e:86:67:a8:95:9b:7f:1c:ae:a7:55:b0:28:95:a7:9a
        a2:24:28:e4:5a:b2:a9:06:7a:69:37:20:15:e1:b6:66:eb:22:b5:b6:77:f6
        65:88:b0:94:2b:91:4b:99:78:4a:e3:56:cc:14:45:d7:97:fd
      Fingerprint:
        8f:22:1a:f2:9f:27:b0:21:6c:da:46:64:31:34:1f:68:42:5a:39:e0 (sha1)
        09:15:11:aa:ea:f9:5a:b5:70:d7:0b:8e:be:a6:d3:cb (md5)
      Use for key: Digital signature

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]