Juniper JUNOSE 11.0.X IP SERVICES Configuration Manual page 265

SignatureAlgorithm Algorithm used for the digital signature
Validity Beginning and ending period during which the certificate is valid
PublicKeyInfo Information about the public key
Extensions Fields that provide additional information for the certificate
Fingerprints Unique hash of the certificate, which can be used to verify
that the certificate is valid
Example 1
host1#show ipsec certificates public-certs
---------- Public Certificates: ----------
Ca Identity:[trustedca1]Certificate =
SubjectName = <C=us, O=junipernetworks, CN=jim>
IssuerName = <C=CA, ST=ON, L=Kanata, O=BetaSecurityCorp, OU=VT Group,
CN=VT Root CA>
SerialNumber= 84483276204047383658902
SignatureAlgorithm = rsa-pkcs1-sha1
Validity =
NotBefore = 2003 Oct 21st, 16:14:42 GMT
NotAfter = 2004 Oct 21st, 16:24:42 GMT
PublicKeyInfo =
PublicKey =
Algorithm name (SSH) : if-modn{sign{rsa-pkcs1-md5}}
Modulus n (1024 bits) :
13409127965307061503054050053800642488356537668078160605242622661311625
19876607806686846822070359658649546374128540876213416858514288030584124
05896520823533525098960335493944208019747261524241389345208872551265097
58542773588125824612424422877870700028956172284401073039192457619002485
5366053321117704284702619
Exponent e ( 17 bits) :
65537
Extensions =
Available = authority key identifier, subject key identifier, key
usage,
subject alternative name, authority information access, CRL
distribution
points
SubjectAlternativeNames =
Following names detected =
DNS (domain name server name)
Viewing specific name types =
DNS = host1.kanata.junipernetworks.com
KeyUsage = DigitalSignature
CRLDistributionPoints =
% Entry 1
FullName =
Following names detected =
URI (uniform resource indicator)
Viewing specific name types =
URI = http://vtsca1/CertEnroll/VTS%20Root%20CA.crl
% Entry 2
Chapter 8: Configuring Digital Certificates
Monitoring Digital Certificates and Public Keys
239