security certificate ca-issued show

Display CA-Issued Digital Certificates

Availability: This command is available to cluster and Vserver administrators at the admin privilege level.

Description

This command displays the following information about the digital certificates issued by the self-signed root-ca: To display more details, run the command with the -instance parameter. This will add the following information:

Parameters

{ [-fields <fieldname>, ...]
If you specify the -fields <fieldname>, ... parameter, the command output also includes the specified field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ]}
If you specify the -instance parameter, the command displays detailed information about all fields.
[-vserver <Vserver Name>] - Vserver
Selects the certificates that match this parameter value.
[-serial <text>] - Serial Number of Certificate
Selects the certificates that match this parameter value.
[-ca <text>] - Certificate Authority
Selects the certificates that match this parameter value.
[-ca-serial <text>] - Serial Number of CA Certificate
Selects the certificates that match this parameter value.
[-common-name <FQDN or Custom Common Name>] - FQDN or Custom Common Name
Selects the certificates that match this parameter value.
[-status <status of certificate>] - Status of Certificate
Selects the certificates that match this parameter value. Possible values include active and revoked.
[-expiration <Date>] - Certificate Expiration Date
Selects the certificates that match this parameter value.
[-revocation <Date>] - Certificate Revocation Date
Selects the certificates that match this parameter value.
[-country <text>] - Country Name (2 letter code)
Selects the certificates that match this parameter value.
[-state <text>] - State or Province Name (full name)
Selects the certificates that match this parameter value.
[-locality <text>] - Locality Name (e.g. city)
Selects the certificates that match this parameter value.
[-organization <text>] - Organization Name (e.g. company)
Selects the certificates that match this parameter value.
[-unit <text>] - Organization Unit (e.g. section)
Selects the certificates that match this parameter value.
[-email-addr <mail address>] - Email Address (Contact Name)
Selects the certificates that match this parameter value.

Examples

The examples below display information about CA issued digital certificates.

cluster1::> security certificate ca-issued show

                                                       Serial Number of
Vserver    Serial Number   Common Name                 CA's Certificate Status
---------- --------------- --------------------------- ---------------- -------
vs0        4F5A2C90        example.com                 4F4EB629         active
    Certificate Authority: vs0.cert
          Expiration Date: Sat Apr 14 16:15:13 2012
          Revocation Date: -

vs0        4F5A2DF2        example.com                 4F4EB629         revoked
    Certificate Authority: vs0.cert
          Expiration Date: Sat Apr 14 16:21:06 2012
          Revocation Date: Fri Mar 09 17:08:30 2012

2 entries were displayed.
cluster1::> security certificate ca-issued show -instance

                              Vserver: vs0
         Serial Number of Certificate: 4F5A2C90
                Certificate Authority: vs0.cert
      Serial Number of CA Certificate: 4F4EB629
           FQDN or Custom Common Name: example.com
                Status of Certificate: active
          Certificate Expiration Date: Sat Apr 14 16:15:13 2012
          Certificate Revocation Date: -
         Country Name (2 letter code): US
   State or Province Name (full name): California
            Locality Name (e.g. city): Sunnyvale
     Organization Name (e.g. company): example
     Organization Unit (e.g. section): IT
         Email Address (Contact Name): web@example.com