display pki certificate filename

Function

The display pki certificate filename command displays the content of a certificate.

Format

display pki certificate filename file-name

Parameters

Parameter	Description	Value
filename file-name	Specifies the name of a certificate file.	The value must be an existing certificate file name.

Views

All views

Default Level

3: Management level

Usage Guidelines

This command shows information about the certificate including signature algorithm, issuer, validity period, subject, and subject public key.

Example

# Display information about the certificate ca.cer.

<HUAWEI> display pki certificate filename ca.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f3:a3:3a:46:f6:09:8d:18
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=CN, ST=JS, L=NJ, O=HW, OU=VPN, CN=CA-210235G7G410FB000060
        Validity
            Not Before: May 16 11:48:04 2017 GMT
            Not After : May 14 11:48:04 2027 GMT
        Subject: C=CN, ST=JS, L=NJ, O=HW, OU=VPN, CN=CA-210235G7G410FB000060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:ef:2f:55:9c:d0:09:c5:1b:d2:52:63:92:
                    c8:f0:88:ed:1b:88:f1:e4:3c:90:07:85:01:8c:d5:
                    80:d9:91:ef:64:e9:79:0c:7d:0e:b9:6c:00:a2:72:
                    e2:1b:aa:9b:2d:11:6b:6f:2d:de:5d:58:22:cf:9e:
                    2f:7d:f1:ad:71:e9:25:0e:bc:26:f1:77:57:02:3d:
                    7f:09:8f:49:63:ae:11:75:57:65:a0:bd:9c:94:c6:
                    df:21:f7:c8:5a:4d:5e:f8:5e:84:b0:b0:fd:a6:c7:
                    e0:78:d1:1c:8a:55:d9:e9:66:1c:e5:4e:ce:88:dd:
                    fa:0f:60:d0:7e:86:a1:ec:b1:34:aa:f7:dd:72:c6:
                    0a:90:c7:4a:6b:a0:86:01:30:b6:6f:23:ff:ce:ae:
                    39:fb:de:18:ce:2f:b9:d7:17:09:8c:29:19:34:7a:
                    69:75:dc:ee:bf:2e:d4:93:fb:f6:a6:5b:f8:2a:6d:
                    fe:bd:f4:8b:30:49:5c:a8:94:76:12:9d:64:78:4a:
                    48:d3:2d:63:da:0a:79:b2:ee:8e:2d:5a:a0:71:99:
                    cf:b9:68:77:d3:d9:cf:12:64:80:bb:42:8c:28:1f:
                    d9:bf:7c:4b:8f:39:1e:dc:92:a4:ff:8e:b3:02:58:
                    c5:79:96:f2:a1:f9:17:cb:ea:49:57:b0:b0:3c:af:
                    db:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                83:08:A4:F4:BC:EC:1B:B6:7D:B0:27:F6:10:47:77:AA:2A:66:59:D5
            Netscape Cert Type:
                SSL CA
    Signature Algorithm: sha256WithRSAEncryption
         1e:6b:2a:76:7e:8e:b0:0e:72:4e:02:53:b0:77:0d:13:28:4e:
         c3:e5:f8:0b:76:fd:56:2c:e6:5b:d1:f8:48:19:17:95:1a:79:
         5e:d9:50:b9:68:bd:36:c4:ce:7b:ce:0c:98:55:b1:44:9f:20:
         66:66:33:3c:b5:40:ad:50:c8:64:1c:07:0e:08:42:72:88:35:
         d4:af:f0:8d:5d:64:90:5d:ec:f0:5c:07:76:10:ed:9b:22:18:
         ef:44:4e:c2:29:32:40:68:fe:04:dc:0e:f6:2b:25:c2:73:f5:
         9b:64:df:25:56:c6:bb:6e:a4:2f:07:b3:9d:c0:18:60:72:cb:
         51:62:94:ee:f7:21:0a:a0:92:58:a1:bf:c8:30:0e:0c:0a:91:
         cb:f4:8f:07:52:ba:df:25:88:8a:b3:3f:f0:68:fa:4c:b7:31:
         c8:97:e0:49:08:8a:74:fc:c2:90:d7:3c:0b:00:38:90:3b:19:
         ab:66:96:24:1f:86:b9:62:49:6d:9c:2d:02:99:38:bb:96:b6:
         dd:0f:3c:6e:24:7b:3d:1e:77:58:e7:46:2b:42:cc:14:6a:a4:
         16:45:ed:3c:b1:d6:30:94:c0:30:d0:46:fa:bc:da:9a:2b:f1:
         fa:f3:df:1b:84

**Table 1** Description of the **display pki certificate filename** command output
Item	Description
Certificate	Information about a certificate.
Data	Data of a certificate.
Version	Version of a certificate.
Serial Number	Serial number of a certificate.
Signature Algorithm	Signature algorithm of a certificate.
Issuer	Issuer of a certificate.
Validity	Validity period of a certificate.
Subject	Subject of a certificate. The subject includes the following attributes: C: country code of a PKI entity. ST: name of the state or province to which a PKI entity belongs. L: geographic area where a PKI entity is located. O: organization to which a PKI entity belongs. OU: department to which a PKI entity belongs. CN: common name of a PKI entity.
Subject Public Key Info	Information about the public key of a certificate.
Public Key Algorithm	Public key algorithm.
RSA Public-Key	Public key.
Modulus	Key modulus.
Exponent	Key exponent.
X509v3 extensions	X.509v3 certificate extensions.
X509v3 Basic Constraints	Basic constraints.
CA	Whether the CA can be trusted.
X509v3 Key Usage	X.509v3 key usage.
X509v3 Subject Key Identifier	Identifier of a subject key.
Netscape Cert Type	Netscape certificate type.