Verifying PKI Information

During routine maintenance, you can view PKI information in the corresponding view, including information about certificate.

Run the display pki certificate enroll-status [ realm realm-name ] command to verify the certificate enrollment status.
Run the display pki cmp statistics [ session session-name ] command to verify CMP session statistics.
Run the display pki ocsp cache statistics command to check statistics about the OCSP response cache.
Run the display pki ocsp server down-information command to verify the OCSP server Down records.
Run the display pki certificate { ca | local | ocsp } realm realm-name command to verify the content of CA, local, or OCSP server certificate loaded on the device.
Run the display pki peer-certificate { name peer-name | all } command to verify the imported peer certificates.
Run the display pki ocsp cache detail command to verify the detail information of the OCSP cache.