show security pki local-certificate

Certificate identifier

Name of the digital certificate.

Certificate version

Revision number of the digital certificate.

Serial number

Unique serial number of the digital certificate.

Issued to

Device that was issued the digital certificate.

Issued by

Authority that issued the digital certificate.

Issuer

Authority that issued the digital certificate, including details of the authority organized using the distinguished name format. Possible subfields are:

• Organization—Organization of origin.
• Organizational unit—Department within an organization.
• Country—Country of origin.
• Locality—Locality of origin.
• Common name—Name of the authority.

Subject

Details of the digital certificate holder organized using the distinguished name format. Possible subfields are:

• Organization—Organization of origin.
• Organizational unit—Department within an organization.
• Country—Country of origin.
• Locality—Locality of origin.
• Common name—Name of the authority.

Alternate subject

Domain name or IP address of the device related to the digital certificate.

Validity

Time period when the digital certificate is valid. Values are:

• Not before—Start time when the digital certificate becomes valid.
• Not after—End time when the digital certificate becomes invalid.

Public key algorithm

Encryption algorithm used with the private key, such as rsaEncryption(1024 bits).

Public key verification status

Public key verification status: Failed or Passed. The detail output also provides the verification hash.

Signature algorithm

Encryption algorithm that the CA used to sign the digital certificate, such as sha1WithRSAEncryption.

Fingerprint

Secure Hash Algorithm (SHA1) and Message Digest 5 (MD5) hashes used to identify the digital certificate.

Distribution CRL

Distinguished name information and URL for the certificate revocation list (CRL) server.

Use for key

Use of the public key, such as Certificate signing, CRL signing, Digital signature, or Data encipherment.