security certificate ca-issued show
Display CA-Issued Digital Certificates
Availability: This command is available to cluster and Vserver administrators at the admin privilege level.
Description
This command displays the following information about the digital certificates issued by the self-signed root-ca:
Vserver
Serial number of certificate
FQDN or custom common name or the name of a person
Serial number of CA certificate
Status (active, revoked)
Certificate Authority
Expiration date
Revocation date
Country name
State or province name
Locality name
Organization name
Organization unit
Contact administrator's email address
Parameters
- { [-fields <fieldname>, ...]
- If you specify the -fields <fieldname>, ... parameter, the command output also includes the specified field or fields. You can use '-fields ?' to display the fields to specify.
- | [-instance ]}
- If you specify the -instance parameter, the command displays detailed information about all fields.
- [-vserver <Vserver Name>] - Vserver
- Selects the certificates that match this parameter value.
- [-serial <text>] - Serial Number of Certificate
- Selects the certificates that match this parameter value.
- [-ca <text>] - Certificate Authority
- Selects the certificates that match this parameter value.
- [-ca-serial <text>] - Serial Number of CA Certificate
- Selects the certificates that match this parameter value.
- [-common-name <FQDN or Custom Common Name>] - FQDN or Custom Common Name
- Selects the certificates that match this parameter value.
- [-status <status of certificate>] - Status of Certificate
- Selects the certificates that match this parameter value. Possible values include active and revoked.
- [-expiration <Date>] - Certificate Expiration Date
- Selects the certificates that match this parameter value.
- [-revocation <Date>] - Certificate Revocation Date
- Selects the certificates that match this parameter value.
- [-country <text>] - Country Name (2 letter code)
- Selects the certificates that match this parameter value.
- [-state <text>] - State or Province Name (full name)
- Selects the certificates that match this parameter value.
- [-locality <text>] - Locality Name (e.g. city)
- Selects the certificates that match this parameter value.
- [-organization <text>] - Organization Name (e.g. company)
- Selects the certificates that match this parameter value.
- [-unit <text>] - Organization Unit (e.g. section)
- Selects the certificates that match this parameter value.
- [-email-addr <mail address>] - Email Address (Contact Name)
- Selects the certificates that match this parameter value.
Examples
The examples below display information about CA issued digital certificates.
cluster1::> security certificate ca-issued show
Serial Number of
Vserver Serial Number Common Name CA's Certificate Status
---------- --------------- --------------------------- ---------------- -------
vs0 4F5A2C90 example.com 4F4EB629 active
Certificate Authority: vs0.cert
Expiration Date: Sat Apr 14 16:15:13 2012
Revocation Date: -
vs0 4F5A2DF2 example.com 4F4EB629 revoked
Certificate Authority: vs0.cert
Expiration Date: Sat Apr 14 16:21:06 2012
Revocation Date: Fri Mar 09 17:08:30 2012
2 entries were displayed.
cluster1::> security certificate ca-issued show -instance
Vserver: vs0
Serial Number of Certificate: 4F5A2C90
Certificate Authority: vs0.cert
Serial Number of CA Certificate: 4F4EB629
FQDN or Custom Common Name: example.com
Status of Certificate: active
Certificate Expiration Date: Sat Apr 14 16:15:13 2012
Certificate Revocation Date: -
Country Name (2 letter code): US
State or Province Name (full name): California
Locality Name (e.g. city): Sunnyvale
Organization Name (e.g. company): example
Organization Unit (e.g. section): IT
Email Address (Contact Name): web@example.com
Give documentation feedback