Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

show ssl-certificates

Syntax

Description

Display information about the Secure Sockets Layer (SSL) certificates installed on the switch. When you configure PEAP as the authentication protocol for MAC RADIUS authentication, you must load the server-side Secure Sockets Layer (SSL) certificate on the switch. PEAP requires an SSL certificate to create a secure TLS tunnel to protect user authentication, and uses server-side public key certificates to authenticate the server. It then creates an encrypted TLS tunnel between the client and the authentication server. The key for this encryption are transported using the server's public key. The ensuing exchange of authentication information inside the tunnel to authenticate the client is then encrypted and user credentials are safe from eavesdropping.

Options

none

Display information about all SSL certificates.

detail

Display information about SSL certificates for the specified level of output.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show ssl-certificates command. Output fields are listed in the approximate order in which they appear.

Table 1: show ssl-certificates Output Fields

Field Name

Field Description

Level of Output

Issuer

Authority that issued the digital certificate, including details of the authority organized using the distinguished name format. Possible subfields are:

  • C—Country of origin.

  • ST—State or province name.

  • L—Locality.

  • O—Organization of origin.

  • OU—Organizational unit.

  • CN—Common name of the authority.

All levels

Valid from

Start time when the digital certificate becomes valid.

detail

Valid from

End time when the digital certificate becomes invalid.

detail

Serial number

Unique serial number of the digital certificate.

detail

Subject

Details of the digital certificate holder organized using the distinguished name format. Possible subfields are:

  • C—Country of origin.

  • ST—State or province name.

  • L—Locality.

  • O—Organization of origin.

  • OU—Organizational unit.

  • CN—Common name of the authority.

detail

Sample Output

show ssl-certificates

show ssl-certificates detail

Release Information

Command introduced in Junos OS Release 17.2R1.