H3C MSR Series

462
Usage guidelines
If you do not specify a certificate attribute group, this command displays information about all
certificate attribute groups.
Examples
# Display information about certificate attribute group mygroup.
<Sysname> display pki certificate attribute-group mygroup
Attribute group name: mygroup
Attribute 1 subject-name dn ctn abc
Attribute 2 issuer-name fqdn nctn app
# Display information about all certificate attribute groups.
<Sysname> display pki certificate attribute-group
Total PKI certificate attribute groups: 2.
Attribute group name: mygroup1
Attribute 1 subject-name dn ctn abc
Attribute 2 issuer-name fqdn nctn app
Attribute group name: mygroup2
Attribute 1 subject-name dn ctn def
Attribute 2 issuer-name fqdn nctn fqd
Table 59 Command output
Field
Description
Total PKI certificate attribute groups Total number of certificate attribute groups.
ctn Contain operation.
nctn Not-contain operation.
equ Equal operation.
nequ Not-equal operation.
Attribute 1 subject-name dn ctn abc
Attribute rule contents:
• alt-subject-name—Alternative subject name.
• issuer-name—Certificate issuer name.
• subject-name—Certificate subject name.
• fqdn—FQDN of the PKI entity.
• ip—IP address of the PKI entity.
• dn—DN of the PKI entity.
• ctn—Indicates the contain operation.
• equ—Indicates the equal operation.
• nctn—Indicates the not-contain operation.
• nequ—Indicates the not-equal operation.
Related commands
attribute
pki certificate attribute-group
display pki certificate domain
Use display pki certificate domain to display information about certificates.