ZyXEL Communications ZyWALL USG-Series - Certificates Commands Examples

Chapter 47 Certificates
ZyWALL / USG (ZLD) CLI Reference Guide
306
47.5 Certificates Commands Examples
The following example creates a self-signed X.509 certificate with IP address 10.0.0.58 as the
common name. It uses the RSA key type with a 512 bit key. Then it displays the list of local
certificates. Finally it deletes the pkcs12request certification request.
show ca category {local|remote} [name
certificate_name format {text|pem}]
Displays a summary of the certificates in the specified
category (local for my certificates or remote for trusted
certificates) or the details of a specified certificate.
show ca validation name name Displays the validation configuration for the specified
remote (trusted) certificate.
show ca spaceusage Displays the storage space in use by certificates.
Table 184 ca Commands Summary (continued)
COMMAND DESCRIPTION
Router# configure terminal
Router(config)# ca generate x509 name test_x509 cn-type ip cn 10.0.0.58 key-type rsa
key-len 512
Router(config)# show ca category local
certificate: default
type: SELF
subject: CN=ZyWALL-1050_Factory_Default_Certificate
issuer: CN=ZyWALL-1050_Factory_Default_Certificate
status: VALID
ID: ZyWALL-1050_Factory_Default_Certificate
type: EMAIL
valid from: 2003-01-01 00:38:30
valid to: 2022-12-27 00:38:30
certificate: test
type: REQ
subject: CN=1.1.1.1
issuer: none
status: VALID
ID: 1.1.1.1
type: IP
valid from: none
valid to: none
certificate: pkcs12request
type: REQ
subject: CN=1.1.1.2
issuer: none
status: VALID
ID: 1.1.1.2
type: IP
valid from: none
valid to: none
certificate: test_x509
type: SELF
subject: CN=10.0.0.58
issuer: CN=10.0.0.58
status: VALID
ID: 10.0.0.58
type: IP
valid from: 2006-05-29 10:26:08
valid to: 2009-05-28 10:26:08
Router(config)# no ca category local pkcs12request