Technical Documentation

Related Topics
clear security pki certificate-request

show security pki certificate-request

Syntax

show security pki certificate-request <brief | detail><certificate-id certificate-id-name>

Release Information

Command introduced in Junos OS Release 7.5.

Description

(Adaptive services interfaces only) Display information about manually generated local digital certificate requests that are stored in the router.

Options

none: (same as brief) Display information about all local digital certificate requests.
brief | detail: (Optional) Display the specified level of output.
certificate-id certificate-id-name: (Optional) Display information about only the specified local digital certificate request

Required Privilege Level

view

List of Sample Output

show security pki certificate-request
show security pki certificate-request detail

Output Fields

Table 1 lists the output fields for the show security pki certificate-request command. Output fields are listed in the approximate order in which they appear.

Table 1: show security pki certificate-request Output Fields

Field Name	Field Description	Level of Output
Certificate identifier	Name of the digital certificate.	All levels
Certificate version	Revision number of the digital certificate.	detail
Issued to	Device that was issued the digital certificate.	none brief
Subject	Details of the digital certificate holder organized using the distinguished name format. Possible subfields are: Common name—Name of the authority. Organization—Organization of origin. Organizational unit—Department within an organization. State—State of origin. Country—Country of origin.	detail
Alternate subject	Domain name or IP address of the device related to the digital certificate.	detail
Validity	Time period when the digital certificate is valid. Values are: Not before—Time when the digital certificate becomes valid. Not after—End time when the digital certificate becomes invalid.	All levels
Public key algorithm	Encryption algorithm used with the private key, such as rsaEncryption(1024 bits).	All levels
Public key verification status	Public key verification status: Failed or Passed. The detail output also provides the verification hash.	All levels
Fingerprint	Secure Hash Algorithm (SHA1) and Message Digest 5 (MD5) hashes used to identify the digital certificate.	detail
Use for key	Use of the public key, such as Certificate signing, CRL signing, Digital signature, or Key encipherment.	detail

Sample Output

show security pki certificate-request

user@host> show security pki certificate-request

Certificate identifier: local-microsoft-2
  Issued to: router2.juniper.net
  Public key algorithm: rsaEncryption(1024 bits)
  Public key verification status: Passed

show security pki certificate-request detail

user@host> show security pki certificate-request
detail

Certificate identifier: local-entrust3
  Certificate version: 3
  Subject: 
    Common name: router3.juniper.net
  Alternate subject: router3.juniper.net
  Public key algorithm: rsaEncryption(1024 bits)
  Public key verification status: Passed
    fb:79:df:d4:a9:03:0f:d3:69:7e:c1:e4:27:35:9c:d9:b1:a2:47:78
    d2:6d:f3:e5:f4:68:4f:b3:04:45:88:57:99:82:39:a6:51:9e:5f:42
    23:3f:d7:6e:3d:a5:54:a9:b1:2d:6e:90:dd:12:8a:bf:ef:2b:20:50
    ba:f0:da:d9:0c:ad:5e:d6:c6:98:3a:ae:3f:90:dd:94:78:c1:ea:2e
    7c:f0:2d:d4:79:d4:cd:f0:52:df:5e:72:f2:e7:ae:66:f7:61:f4:bc
    72:57:3e:6c:6d:d3:24:58:8b:f4:ef:da:2a:6a:fa:eb:98:f8:34:84
    79:54:da:4f:d3:6f:52:1f
  Fingerprint:      
    7c:e8:f9:45:93:8d:a3:92:7f:18:29:02:f1:c8:e2:85:3d:ad:df:1f (sha1)
    00:4e:df:a0:6b:ad:8c:50:da:7c:a1:cf:5d:37:b0:ea (md5)
  Use for key: Digital signature