Virtual Private Networks
Configuring a VPN Using IPSec
8-62
Viewing Certificates. You can use the show crypto ca commands to view:
certificates
CRLs
CA profiles
Enter the command from the enable mode context:
Syntax: show crypto ca [certificates | crls | profiles]
For example:
ProCurve# show crypto ca certificates
The certificates option shows both CA and self certificates. View certificates
to verify that the information in them is correct. You should also keep track
of when your certificates expire and periodically update them.
If the information in a self certificate is incorrect, you should view the CA
profile. Information may have been miskeyed into the profile, which would
cause the OS to submit incorrect information to the CA server.
Figure 8-12 shows a sample display of certificates loaded on a router.