inspect certificate device
Table of Contents
Expand all | Collapse all
-
-
- clear app-engine
- clear app-map dynamic
- clear app-probe prefix
- clear connection
- clear device account-login
- clear dhcplease
- clear dhcprelay stat
- clear flow and clear flows
- clear flow-arp
- clear qos-bwc queue-snapshot
- clear routing
- clear routing multicast statistics
- clear routing ospf
- clear routing peer-ip
- clear switch mac-address-entries
- clear user-id agent statistics
-
- arping interface
- curl
- ping
- ping6
- debug bounce interface
- debug bw-test src-interface
- debug cellular stats
- debug controller reachability
- debug flow
- debug ipfix
- debug log agent eal file log
- debug logging facility
- debug logs dump
- debug logs follow
- debug logs tail
- debug poe interface
- debug process
- debug reboot
- debug routing multicast log
- debug routing multicast pimd
- debug servicelink logging
- debug tcpproxy
- debug time sync
- debug performance-policy
- dig dns
- dig6
- file export
- file remove
- file space available
- file tailf log
- file view log
- ssh6 interface
- ssh interface
- tcpdump
- tcpping
- traceroute
- traceroute6
-
- dump appdef config
- dump appdef version
- dump app-engine
- dump app-l4-prefix table
- dump app-probe config
- dump app-probe flow
- dump app-probe prefix
- dump app-probe status
- dump auth config
- dump auth status
- dump banner config
- dump bfd status
- dump bypass-pair config
- dump cellular config
- dump cellular stats
- dump cellular status
- dump cgnxinfra status
- dump cgnxinfra status live
- dump cgnxinfra status store
- dump config network
- dump config security
- dump controller cipher
- dump controller status
- dump device accessconfig
- dump device conntrack count
- dump device date
- dump device info
- dump device status
- dump dhcp-relay config
- dump dhcprelay stat
- dump dhcp-server config
- dump dhcp-server status
- dump dhcpstat
- dump dnsservice config all
- dump dpdk cpu
- dump dpdk interface
- dump dpdk port status
- dump dpdk stats
- dump flow
- dump flow count-summary
- dump interface config
- dump interface status
- dump interface status interface details
- dump interface status interface module
- dump ipfix config collector-contexts
- dump ipfix config derived-exporters
- dump ipfix config filter-contexts
- dump ipfix config ipfix-overrides
- dump ipfix config prefix-filters
- dump ipfix config profiles
- dump ipfix config templates
- dump lldp
- dump lldp config
- dump lldp info
- dump lldp stats
- dump lldp status
- dump log-agent eal conn
- dump log-agent eal response-time
- dump log-agent eal stats
- dump log-agent config
- dump log-agent iot snmp config
- dump log-agent iot snmp device discovery stats
- dump log-agent ip mac bindings
- dump log-agent neighbor discovery stats
- dump log-agent status
- dump ml7 mctd counters
- dump ml7 mctd session
- dump ml7 mctd version
- dump nat counters
- dump nat summary
- dump network-policy config policy-rules
- dump network-policy config policy-sets
- dump network-policy config policy-stacks
- dump network-policy config prefix-filters
- dump overview
- dump performance-policy config policy-rules
- dump performance-policy config policy-sets
- dump performance-policy config policy-set-stacks
- dump performance-policy config threshold-profile
- dump poe system config
- dump poe system status
- dump priority-policy config policy-rules
- dump priority-policy config policy-sets
- dump priority-policy config policy-stacks
- dump priority-policy config prefix-filters
- dump probe config
- dump probe profile
- dump radius config
- dump radius statistics
- dump radius status
- dump reachability-probe config
- dump qos-bwc config
- dump reachability-probe status
- dump routing aspath-list
- dump routing cache
- dump routing communitylist
- dump routing multicast config
- dump routing multicast igmp
- dump routing multicast interface
- dump routing multicast internal vif-entries
- dump routing multicast mroute
- dump routing multicast pim
- dump routing multicast sources
- dump routing multicast statistics
- dump routing multicast status
- dump routing ospf
- dump routing peer advertised routes
- dump routing peer config
- dump routing peer neighbor
- dump routing peer received-routes
- dump routing peer routes
- dump routing peer route-via
- dump routing peer status
- dump routing peer route-json
- dump routing prefixlist
- dump routing prefix-reachability
- dump routing route
- dump routing routemap
- dump routing running-config
- dump routing summary
- dump routing static-route reachability-status
- dump routing static-route config
- dump security-policy config policy-rules
- dump security-policy config policy-set
- dump security-policy config policy-set-stack
- dump security-policy config prefix-filters
- dump security-policy config zones
- dump sensor type
- dump sensor type summary
- dump serviceendpoints
- dump servicelink summary
- dump servicelink stats
- dump servicelink status
- dump site config
- dump snmpagent config
- dump snmpagent status
- dump software status
- dump spoke-ha config
- dump spoke-ha status
- dump standingalarms
- dump static-arp config
- dump static host config
- dump static routes
- dump support details
- dump-support
- dump switch fdb vlan-id
- dump switch port status
- dump switch vlan-db
- dump syslog config
- dump syslog-rtr stats
- dump syslog status
- dump time config
- dump time log
- dump time status
- dump troubleshoot message
- dump user-id agent config
- dump user-id agent statistics
- dump user-id agent status
- dump user-id agent summary
- dump user-id groupidx
- dump user-id group-mapping
- dump user-id ip-user-mapping
- dump user-id statistics
- dump user-id status
- dump user-id summary
- dump user-id useridx
- dump vlan member
- dump vpn count
- dump vpn ka all
- dump vpn ka summary
- dump vpn ka VpnID
- dump vpn status
- dump vpn summary
- dump vrf
- dump waninterface config
- dump waninterface summary
-
- inspect app-flow-table
- inspect app-l4-prefix lookup
- inspect app-map
- inspect certificate
- inspect certificate device
- inspect cgnxinfra role
- inspect connection
- inspect dhcplease
- inspect dhcp6lease
- inspect dpdk ip-rules
- inspect dpdk vrf
- inspect fib
- inspect fib-leak
- inspect flow-arp
- inspect flow brief
- inspect flow-detail
- inspect flow internal
- inspect interface stats
- inspect ipfix exporter-stats
- inspect ipfix collector-stats
- inspect ipfix app-table
- inspect ipfix wan-path-info
- inspect ipfix interface-info
- inspect ip-rules
- inspect ipv6-rules
- inspect lqm stats
- inspect memory summary
- inspect network-policy conflicts
- inspect network-policy dropped
- inspect network-policy hits policy-rules
- inspect network-policy lookup
- inspect performance-policy fec status
- inspect policy-manager status
- inspect policy-mix lookup-flow
- inspect priority-policy conflicts
- inspect priority-policy dropped
- inspect priority-policy hits default-rule-dscp
- inspect priority-policy hits policy-rules
- inspect priority-policy lookup
- inspect performance-policy incidents
- inspect performance-policy lookup
- inspect performance-policy hits analytics
- inspect process status
- inspect qos-bwc debug-state
- inspect qos-bwc queue-history
- inspect qos-bwc queue-snapshot
- inspect routing multicast fc site-iface
- inspect routing multicast interface
- inspect routing multicast mroute
- inspect security-policy lookup
- inspect security-policy size
- inspect switch mac-address-table
- inspect system arp
- inspect system ipv6-neighbor
- inspect system vrf
- inspect vrf
- inspect wanpaths
-
inspect certificate device
Use the inspect certificate device command to display the information on certificates used for communicating with the device.Command
inspect certificate device
Options
None |
Command Notes
Role | Super, Read Only |
Related Commands | — |
Introduced in | Release 6.2.1 |
Example
inspect certificate device Certificate: Data: Version: 3 (0x2) Serial Number: 43:ae:4c:e2:f4:6f:3e:f0:37:42:ff:32:bb:54:b8:ed:e7:bd:9e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN = USC-Client-Issuing-CA2-BETA2-G3, O = Palo-Alto-Networks-Inc., C = US Validity Not Before: Feb 6 13:36:48 2023 GMT Not After : May 7 13:36:48 2023 GMT Subject: CN = b9593e42-ec49-7fe6-9096-94992261f9, O = Palo Alto Networks, L = Santa Clara, ST = CA, C = US, 1.3.6.1.4.1.25461.4.22.1 = prisma_sdwa n_service_cert, 1.3.6.1.4.1.25461.4.22.2 = prisma-sdwan, 1.3.6.1.4.1.25461.4.22.3 = b9593e42-ec49-7fe6-9096-94992261f9, 1.3.6.1.4.1.25461.4.22.6 = 100, 1. 3.6.1.4.1.25461.4.22.7 = 1672399681617012628.cgnx.net Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (4096 bit) Modulus: 00:da:aa:87:dc:8e:29:8e:ac:a7:3a:30:d8:13:fd: 38:dc:3a:b3:7b:4b:77:07:d2:9a:c8:06:0c:78:52: 4e:a3:48:d5:8a:6b:c5:fc:ac:f0:d0:78:05:ec:fa: 0c:75:fe:64:3a:87:b0:91:3b:c7:88:e6:bd:b2:6c: 78:63:04:6a:72:32:8a:fc:81:00:3f:8b:3c:28:a5: f1:dd:6d:83:72:e8:b6:95:b3:fa:15:e9:fd:b8:a7: 92:b2:a0:82:22:46:99:67:41:4d:73:9d:ef:7c:95: 77:db:e3:0e:88:82:4b:09:af:67:a5:7c:a9:d0:94: 3d:20:ae:f3:07:9e:ca:7a:53:aa:97:f9:46:80:80: 81:a4:ae:cc:25:36:ce:96:7e:64:12:49:d2:1f:78: 81:d9:da:fd:68:8c:5e:09:3d:6c:70:7d:43:24:23: f8:dc:85:c7:a6:20:f7:57:99:e8:28:f8:be:cd:f6: 47:45:72:3b:b9:24:e7:8d:0a:cf:bd:e9:32:61:72: db:e1:d0:d1:72:bc:7f:c7:d5:4b:b7:69:eb:7e:c8: a5:1c:47:e4:32:47:8e:03:7a:fc:17:74:54:b7:16: 2c:18:35:ba:30:ea:58:de:48:3d:9e:c5:a4:32:d9: 47:63:03:d5:e9:39:47:66:4a:88:a8:29:88:4e:a7: a8:70:48:91:ec:db:3f:a7:f5:52:98:f5:3b:ab:14: 1c:3f:d0:78:e6:c0:b4:c4:45:a3:d8:53:c8:fe:39: aa:79:7c:5d:1c:a9:d9:c8:58:1d:3c:33:4c:3d:f2: a7:94:70:05:50:33:79:e4:44:5b:68:0e:d7:92:6d: 47:58:44:21:8d:09:35:21:01:dc:95:e3:bf:2b:4b: 08:24:64:9f:2e:95:f1:05:e5:6c:77:5a:5d:95:3b: a1:be:5f:52:16:e5:7a:50:68:8e:e2:e6:48:87:e4: 4f:85:46:09:38:65:5f:50:6e:5b:61:86:2e:5b:c0: 3f:e2:38:4c:23:52:b9:ab:07:b9:5f:a9:33:08:66: d4:16:44:f6:e0:b8:b7:20:df:fa:cf:c7:08:28:74: 18:59:62:74:6c:64:ac:8a:41:37:53:e3:d5:d2:fa: b1:49:0e:cd:ed:a0:63:a0:48:a2:90:af:49:f7:57: e8:49:45:44:64:01:1e:e7:00:40:a2:d8:a7:74:52: c3:fd:58:f1:54:61:d7:49:6e:db:d1:99:f4:44:65: 8d:6e:a0:88:67:c8:03:13:79:31:28:d1:ac:56:41: 47:5f:4f:8a:51:91:17:3e:ea:1b:4a:8d:e4:73:0b: 10:36:ec:1a:73:b1:a2:c9:f4:f6:56:09:22:a2:cc: 48:e7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Authority Key Identifier: keyid:51:8B:13:D8:D7:F2:6E:4E:7D:1B:FD:03:2F:63:74:12:8A:F4:AE:04 Authority Information Access: CA Issuers - URI:https://crl.paloaltonetworks.com/beta2/beta2-pan-usc-client-issuing-ca2-beta2-g3.crt OCSP - URI:http://ocsp-beta2.paloaltonetworks.com/ocsp X509v3 Extended Key Usage: TLS Web Client Authentication X509v3 CRL Distribution Points: Full Name: URI:http://crl.paloaltonetworks.com/beta2/beta2-pan-usc-client-issuing-ca2-beta2-g3.crl X509v3 Subject Key Identifier: 86:45:65:83:EB:22:97:16:DE:7F:60:20:59:B0:3C:D4:B8:7E:A5:3C X509v3 Key Usage: critical Digital Signature, Key Encipherment Signature Algorithm: sha256WithRSAEncryption 2d:c0:98:e0:d5:81:90:76:ca:0e:c7:75:ad:39:fb:12:7a:72: ca:3e:d1:be:35:6d:0c:bc:55:c1:ab:1c:e9:d8:16:d4:2e:c7: d8:ec:e2:8f:3d:48:98:98:b7:c6:05:75:79:4c:bb:75:94:f5: c9:2b:50:c0:4b:11:6d:a6:9e:03:d0:ec:77:35:c2:31:ff:80: 0b:18:9e:65:21:00:0d:e6:21:b5:56:5f:96:fa:ef:b5:b6:5a: 60:52:40:91:59:a8:f8:20:5e:39:25:2c:e9:ca:2b:7a:db:a1: bd:6c:51:a6:44:fc:77:cd:b6:54:1b:31:7f:64:78:2a:b0:31: 34:87:1d:c1:fa:01:1c:b4:a2:b0:86:b7:7f:d0:5b:2b:ee:0f: 8e:41:8f:42:d4:86:20:d2:2b:fc:4d:c3:58:c8:c8:62:ab:2d: cf:53:80:c5:2c:97:fd:ae:47:81:f1:40:ee:81:77:5b:d3:6a: fe:98:bc:41:99:3c:8f:45:46:10:bd:07:10:df:e1:af:9d:08: bf:0c:e7:c9:cd:88:e5:3a:dc:48:45:03:27:59:60:5d:d5:85: 0c:4c:06:a0:00:6f:15:a5:fa:f0:d5:06:2f:60:16:6d:58:82: a7:77:ed:c8:13:69:52:39:83:7b:cf:60:86:96:6d:9b:f0:39: 62:cf:eb:b2:8c:6a:43:11:7a:97:f8:96:4d:ab:76:62:4a:fc: f0:a2:58:04:71:5c:d0:3d:7d:0e:27:70:b6:66:6f:f5:4a:80: 0d:21:10:40:45:02:97:5f:e8:a0:1d:c1:2d:81:64:a3:8a:a3: 9e:0d:75:71:cf:89:6a:26:35:43:c2:cf:f5:1b:a3:91:e9:5a: 17:15:ca:80:1b:41:56:17:ef:b4:af:e2:b9:9c:bc:a1:a8:11: cd:e3:cf:f7:5b:d5:0f:6d:0a:3c:8d:ef:25:b6:29:10:98:cf: 6e:9e:a0:b6:6f:b3:ba:43:dd:05:ad:bf:67:29:f2:d8:87:3e: 85:e9:26:46:25:f8