Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

show ssl-certificates

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
show ssl certificates 

Description

Display information about the Secure Sockets Layer (SSL) certificates installed on the switch. When you configure PEAP as the authentication protocol for MAC RADIUS authentication, you must load the server-side Secure Sockets Layer (SSL) certificate on the switch. PEAP requires an SSL certificate to create a secure TLS tunnel to protect user authentication, and uses server-side public key certificates to authenticate the server. It then creates an encrypted TLS tunnel between the client and the authentication server. The key for this encryption are transported using the server's public key. The ensuing exchange of authentication information inside the tunnel to authenticate the client is then encrypted and user credentials are safe from eavesdropping.

Options

none

Display information about all SSL certificates.

detail

Display information about SSL certificates for the specified level of output.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show ssl-certificates command. Output fields are listed in the approximate order in which they appear.

Table 1: show ssl-certificates Output Fields

Field Name

Field Description

Level of Output

Issuer

Authority that issued the digital certificate, including details of the authority organized using the distinguished name format. Possible subfields are:

  • C—Country of origin.

  • ST—State or province name.

  • L—Locality.

  • O—Organization of origin.

  • OU—Organizational unit.

  • CN—Common name of the authority.

All levels

Valid from

Start time when the digital certificate becomes valid.

detail

Valid from

End time when the digital certificate becomes invalid.

detail

Serial number

Unique serial number of the digital certificate.

detail

Subject

Details of the digital certificate holder organized using the distinguished name format. Possible subfields are:

  • C—Country of origin.

  • ST—State or province name.

  • L—Locality.

  • O—Organization of origin.

  • OU—Organizational unit.

  • CN—Common name of the authority.

detail

Sample Output

show ssl-certificates

content_copy zoom_out_map
user@root> show ssl-certificates
 Issuer:        /C=IN/ST=KA/L=Blr/O=JNPR/OU=CP/CN=User-Radius/emailAddress=user@juniper.net

show ssl-certificates detail

content_copy zoom_out_map
user@root> show ssl-certificates detail  

    Issuer:        /C=IN/ST=KA/L=Blr/O=JNPR/OU=CP/CN=User-Radius/emailAddress=user@juniper.net
    Valid From:    May 30 17:41:04 2016 GMT
    Valid Till:    May 29 17:41:04 2026 GMT
    Serial Number: 0
    Subject:       /C=IN/ST=KA/L=Blr/O=JNPR/OU=CP/CN=User-Radius/emailAddress=user@juniper.net

Release Information

Command introduced in Junos OS Release 17.2R1.

footer-navigation