Shows the list of all the certificates that have been added to the bundle.
If a bundle name is specified, the attributes of each certificate are displayed. If a bundle name is not specified, the list of all the certificate bundle names are displayed. The comment is also added automatically when you import a certificate bundle.
The following important attributes are provided in the certificate:
Subject
Public Key
Serial Number
Valid to (expiration data)
Key Usage
Subject Alternative Name
For details about how to configure a CA certificate bundle, refer to the Trellix System Security Guide.
Note
This command is not currently used on the Intelligent Virtual Execution - Server compute node.
Syntax
show crypto certificate bundle [<bundle_name>] [pem]
Parameters
bundle_name
(Optional) Name of the certificate bundle. The bundle must be named client-cert-auth.
pem
(Optional) Displays the Privacy Enhanced Email (PEM) encrypted ASCII string of the certificate bundle.
Output fields
The following table describes the output fields for the show crypto certificate bundle command. Fields are listed in the approximate order in which they appear in the output.
Field | Description |
|---|---|
Certificate bundle | Name of the certificate bundle. |
Certificate with name | Name of the certificate that already has been configured. |
Certificate Type | The class of algorithm used to generate the certificate. Valid values are ECDSA and RSA. |
Private Key | Whether a matching private key for the certificate is present. |
Serial Number | A unique number that the issuer assigned to the certificate. |
SHA-1 Fingerprint | A short sequence of bytes used to authenticate or look up the public key. |
Starts | The date and time the certificate will start. |
Expires | The date and time the certificate will expire. |
Common Name | Common Name (CN) entry from the Distinguished Name (DN) attribute that is associated in a certificate. |
Country | The country code of the country where your organization is located. |
State or Province | The state or province where your organization is located. |
Locality | The city or locality where your organization is located. |
Organization | The legal name of your organization. |
Organization Unit | The department or unit in your organization using the certificate. |
Examples
The following example shows the attributes of each certificate that have been added to the bundle.
hostname # show crypto certificate bundle client-cert-auth Certificate bundle 'client-cert-auth': Certificate with name 'client-cert-auth-0235cfce' Certificate Type: RSA Private Key: not present Serial Number: 0xfd65e002d268c9bc SHA-1 Fingerprint: c2f4c9ea8a283957e49689237150c80d4560c571 Validity: Starts: 2016/07/12 07:13:09 Expires: 2026/07/10 07:13:09 Subject: Common Name: vps1_root_ca_1 Country: US State or Province: CA Locality: Milpitas Organization: FireEye Organizational Unit: CAou Issuer: Common Name: vps1_root_ca_1 Country: US State or Province: CA Locality: Milpitas Organization: FireEye Organizational Unit: CAou Certificate with name 'client-cert-auth-5feb5ce1' Certificate Type: RSA Private Key: not present Serial Number: 0x1001 SHA-1 Fingerprint: 12d57293f558e5090502b24fdac4cdaa76360fcd Validity: Starts: 2016/09/10 15:36:21 Expires: 2026/09/08 15:36:21 Subject: Common Name: vps1_ca_2 Country: US State or Province: CA Locality: Milpitas Organization: FireEye Organizational Unit: CAou Issuer: Common Name: vps1_root_ca_1 Country: US State or Province: CA Locality: Milpitas Organization: FireEye Organizational Unit: CAou
The following example shows the list of all the certificate bundle names.
hostname # show crypto certificate bundle Bundle name Comment ============================================================================= client-cert-auth Imported from http://builds.eng.fireeye.com/~john.does/vps1-cacerts.pem
User role
Admin
Command mode
Enable
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Central Management System: Release 7.9.1
Network Security: Release 7.9.1
Endpoint Security (HX): Release 2.5
Intelligent Virtual Execution - Server: Release 7.9.1
Email Security — Server: Release 7.9.0