Pki Retrieval-Crl Domain; Pki Validate-Certificate - H3C S3100 Series Command Manual

pki retrieval-crl domain

Syntax
pki retrieval-crl domain domain-name
View
System view
Parameters
domain-name: Name of the PKI domain, a string of 1 to 15 characters.
Description
Use the pki retrieval-crl command to retrieve the latest CRLs from the server for CRL distribution.
CRLs are used to verify the validity of certificates.
Related commands: pki domain.
Examples
# Retrieve CRLs.
<Sysname> system-view
[Sysname] pki retrieval-crl domain 1

pki validate-certificate

Syntax
pki validate-certificate { ca | local } domain domain-name
View
System view
Parameters
ca: Verifies the CA certificate.
local: Verifies the local certificate.
domain-name: Name of the PKI domain to which the certificate to be verified belongs, a string of 1 to 15
characters.
Description
Use the pki validate-certificate command to verify the validity of a certificate.
The focus of certificate validity verification is to check that the certificate is signed by the CA and that the
certificate has neither expired nor been revoked.
Related commands: pki domain.
Examples
# Verify the validity of the local certificate.
<Sysname> system-view
[Sysname] pki validate-certificate local domain 1
1-21