security certificate ca-issued show
Display CA-Issued Digital Certificates
Availability: This command is available to cluster and Vserver administrators at the admin privilege level.
Description
This command displays the following information about the digital certificates issued by the self-signed root-ca:
- Vserver
- Serial number of certificate
- FQDN or custom common name or the name of a person
- Serial number of CA certificate
- Status (active, revoked)
- Certificate Authority
- Expiration date
- Revocation date
- Country name
- State or province name
- Locality name
- Organization name
- Organization unit
- Contact administrator's email address
Parameters
- { [-fields <fieldname>, ...]
- If you specify the -fields <fieldname>, ... parameter, the command output also includes the specified field or fields. You can use '-fields ?' to display the fields to specify.
- | [-instance ]}
- If you specify the -instance parameter, the command displays detailed information about all fields.
- [-vserver <Vserver Name>] - Vserver
- Selects the certificates that match this parameter value.
- [-serial <text>] - Serial Number of Certificate
- Selects the certificates that match this parameter value.
- [-ca <text>] - Certificate Authority
- Selects the certificates that match this parameter value.
- [-ca-serial <text>] - Serial Number of CA Certificate
- Selects the certificates that match this parameter value.
- [-common-name <FQDN or Custom Common Name>] - FQDN or Custom Common Name
- Selects the certificates that match this parameter value.
- [-status <status of certificate>] - Status of Certificate
- Selects the certificates that match this parameter value. Possible values include active and revoked.
- [-expiration <Date>] - Certificate Expiration Date
- Selects the certificates that match this parameter value.
- [-revocation <Date>] - Certificate Revocation Date
- Selects the certificates that match this parameter value.
- [-country <text>] - Country Name (2 letter code)
- Selects the certificates that match this parameter value.
- [-state <text>] - State or Province Name (full name)
- Selects the certificates that match this parameter value.
- [-locality <text>] - Locality Name (e.g. city)
- Selects the certificates that match this parameter value.
- [-organization <text>] - Organization Name (e.g. company)
- Selects the certificates that match this parameter value.
- [-unit <text>] - Organization Unit (e.g. section)
- Selects the certificates that match this parameter value.
- [-email-addr <mail address>] - Email Address (Contact Name)
- Selects the certificates that match this parameter value.
Examples
The examples below display information about CA issued digital certificates.
cluster1::> security certificate ca-issued show
Serial Number of
Vserver Serial Number Common Name CA's Certificate Status
---------- --------------- --------------------------- ---------------- -------
vs0 4F5A2C90 example.com 4F4EB629 active
Certificate Authority: vs0.cert
Expiration Date: Sat Apr 14 16:15:13 2012
Revocation Date: -
vs0 4F5A2DF2 example.com 4F4EB629 revoked
Certificate Authority: vs0.cert
Expiration Date: Sat Apr 14 16:21:06 2012
Revocation Date: Fri Mar 09 17:08:30 2012
2 entries were displayed.
cluster1::> security certificate ca-issued show -instance
Vserver: vs0
Serial Number of Certificate: 4F5A2C90
Certificate Authority: vs0.cert
Serial Number of CA Certificate: 4F4EB629
FQDN or Custom Common Name: example.com
Status of Certificate: active
Certificate Expiration Date: Sat Apr 14 16:15:13 2012
Certificate Revocation Date: -
Country Name (2 letter code): US
State or Province Name (full name): California
Locality Name (e.g. city): Sunnyvale
Organization Name (e.g. company): example
Organization Unit (e.g. section): IT
Email Address (Contact Name): web@example.com
Give documentation feedback