HP A5500 EI User Manual

230
Description
Use the display pki crl domain command to display the locally saved CRLs.
Related commands: pki retrieval-crl and pki domain.
Examples
# Display the locally saved CRLs.
<Sysname> display pki crl domain 1
Certificate Revocation List (CRL):
Version 2 (0x1)
Signature Algorithm: sha1WithRSAEncryption
Issuer:
C=CN
O=abc
OU=soft
CN=A Test Root
Last Update: Jan 5 08:44:19 2004 GMT
Next Update: Jan 5 21:42:13 2004 GMT
CRL extensions:
X509v3 Authority Key Identifier:
keyid:0F71448E E075CAB8 ADDB3A12 0B747387 45D612EC
Revoked Certificates:
Serial Number: 05a234448E…
Revocation Date: Sep 6 12:33:22 2004 GMT
CRL entry extensions:…
Serial Number: 05a278445E…
Revocation Date: Sep 7 12:33:22 2004 GMT
CRL entry extensions:…
Table 33 Output description
Field
Description
Version
Version of the CRL
Signature Algorithm
Signature algorithm used by the CRLs
Issuer
CA issuing the CRLs
Last Update
Last update time
Next Update
Next update time
CRL extensions
Extensions of CRL
X509v3 Authority Key Identifier
CA issuing the CRLs. The certificate version is X.509
v3.
keyid
ID of the public key
A CA might have multiple key pairs. This field
indicates the key pair used by the CRL’s signature.
Revoked Certificates
Revoked certificates
Serial Number
Serial number of the revoked certificate
Revocation Date
Revocation date of the certificate

HP A5500 EI Specifications

General

Brand	HP
Model	A5500 EI
Category	Network Router
Language	English