Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

show security pki local-certificate

Syntax

Description

Display information about the local digital certificates and the corresponding public keys installed in the router.

Options

none

(same as brief) Display information about all local digital certificates and corresponding public keys.
brief | detail

(Optional) Display the specified level of output.
certificate-id certificate-id-name

(Optional) Display information about only the specified the local digital certificate and corresponding public keys.
system-generated

(Optional) Auto-generated self-signed certificate.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show security pki local-certificate command. Output fields are listed in the approximate order in which they appear.

Table 1: show security pki local-certificate Output Fields

Field Name

Field Description

Level of Output

Certificate identifier

Name of the digital certificate.

All levels

Certificate version

Revision number of the digital certificate.

detail

Serial number

Unique serial number of the digital certificate.

detail

Issued by

Authority that issued the digital certificate.

none brief

Issued to

Device that was issued the digital certificate.

none brief

Issuer

Authority that issued the digital certificate, including details of the authority organized using the distinguished name format. Possible subfields are:

  • Common name—Name of the authority.

  • Organization—Organization of origin.

  • Organizational unit—Department within an organization.

  • State—State of origin.

  • Country—Country of origin.

detail

Subject

Details of the digital certificate holder organized using the distinguished name format. Possible subfields are:

  • Common name—Name of the authority.

  • Organization—Organization of origin.

  • Organizational unit—Department within an organization.

  • State—State of origin.

  • Country—Country of origin.

detail

Alternate subject

Domain name or IP address of the device related to the digital certificate.

detail

Validity

Time period when the digital certificate is valid. Values are:

  • Not before—Start time when the digital certificate becomes valid.

  • Not after—End time when the digital certificate becomes invalid.

All levels

Public key algorithm

Encryption algorithm used with the private key, such as rsaEncryption (1024 bits).

All levels

Public key verification status

Public key verification status: Failed or Passed. The detail output also provides the verification hash.

All levels

Signature algorithm

Encryption algorithm that the CA used to sign the digital certificate, such as sha1WithRSAEncryption.

detail

Fingerprint

Secure Hash Algorithm (SHA1) and Message Digest 5 (MD5) hashes used to identify the digital certificate.

detail

Distribution CRL

Distinguished name information and URL for the certificate revocation list (CRL) server.

detail

Use for key

Use of the public key, such as Certificate signing, CRL signing, Digital signature, or Key encipherment.

detail

Sample Output

show security pki local-certificate

show security pki local-certificate detail

Release Information

Command introduced in Junos OS Release 7.5.

Related Documentation