H3C MSR Series Command Reference Manual page 486

Syntax
display pki certificate domain domain-name { ca | local | peer [ serial serial-num ] }
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
domain-name: Specifies a PKI domain by its name, a case-insensitive string of 1 to 31 characters.
The domain name cannot contain the special characters listed in
Table 60 Special characters
Character name
Tilde
Asterisk
Backslash
Vertical bar
Colon
ca: Specifies the CA certificate.
local: Specifies the local certificates.
peer: Specifies the peer certificates.
serial serial-num: Specifies the serial number of a peer certificate.
Usage guidelines
If you specify the CA keyword, this command displays information about all CA certificates in the
domain. If the domain has RA certificates, the RA certificates are also displayed.
If you specify the local keyword, this command displays information about all local certificates in the
domain.
If you specify the peer keyword without a serial number, this command displays brief information
about all peer certificates. If you specify a serial number, this command display detailed information
about the specified peer certificate.
Examples
# Display information about the CA certificate in PKI domain aaa.
<Sysname> display pki certificate domain aaa ca
Certificate:
Data:
Version: 1 (0x0)
Serial Number:
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=cn, O=docm, OU=rnd, CN=rootca
Validity
Symbol
~
*
\
|
:
5c:72:dc:c4:a5:43:cd:f9:32:b9:c1:90:8f:dd:50:f6
Not Before: Jan 6 02:51:41 2011 GMT
Not After : Dec 7 03:12:05 2013 GMT
Character name
Dot
Left angle bracket
Right angle bracket
Quotation marks
Apostrophe
463
Table 60.
Symbol
.
<
>
"
'