show ip ssl

Displays SSL certificate details.
Syntax
show ip ssl [ certificate | client-certificate | device-certificate | profile ]
Parameters
certificate
Displays the SSL certificate details for self-signed certificates.
client-certificate
Displays SSL client certificate details.
device-certificate
Displays SSL details for TPM/non-TPM ICX device certificate.
profile
Displays SSL profile details.
Modes

Privileged EXEC mode

Global configuration mode

Examples

The following example shows SSL TLS protocol details.

device# show ip ssl
Session  Protocol Source IP                Source Port  Remote IP                Remote Port  Profile                  
1        TLS1_2   10.177.131.18            32952        10.177.131.216           2083         tls_profile  

The following example displays user SSL profile and device SSL profile information.

device(config)# show ip ssl profile
SSL Profile Information:
***************************

Trustpoint Name    : DEVICE_TRUSTPNT
Remote Domain      : BTC3243M00J.switch-id.ruckuswireless.com
Signature Algorithm: sha256WithRSAEncryption

 Not Before: 2016 Feb 18 19:28:17
 Not After : 2036 Feb 18 19:28:17


Common Name        : RuckusRootCA
Organization       : Ruckus Wireless
Locality           : Sunnyvale
State              : California
Country            : US

Common Name        : RuckusRootCA
Organization       : Ruckus Wireless
Locality           : Sunnyvale
State              : California
Country            : US

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

The following example displays SSL certificate details.

device(config)# show ip ssl certificate
Trusted Certificates:
 Dynamic:
 Index 0:
  Signature Algorithm: sha256WithRSAEncryption
  Issuer:
   CN: 10.25.105.201
  Validity:
   Not Before: 2014 Aug 22 05:12:45
   Not After : 2017 Aug 21 05:12:45
  Subject:
   CN: 10.25.105.201
  X509v3 extensions:
   X509v3 Subject Alternative Name:
    IP Address: 10.25.105.201
  Signature:
   12:ec:41:d8:01:45:61:ce:cf:7e:80:de:a6:7c:a7:2e:01:7f:
   42:27:22:1d:ac:a2:47:c5:0d:4f:e3:68:24:de:bf:50:40:65:
   25:8c:30:bd:ff:a7:d0:21:73:d2:ba:5e:67:42:1f:bb:97:4a:
   d9:1d:c3:ca:31:c4:59:10:79:d1:42:f4:b6:1a:b0:98:4e:a8:
   ef:e2:a2:98:c3:14:16:63:50:02:a0:18:9c:7a:e3:17:39:0d:
   b7:30:ab:23:9f:63:bd:0f:9e:d8:67:b0:fe:ec:3b:fa:4c:f4:
   3d:34:e2:99:0e:99:24:ec:93:fb:8a:e5:4a:bf:74:d6:ff:91:
   0a:dc:fb:b9:4f:91:5d:d4:f6:77:23:eb:ec:eb:3a:62:08:e1:
   a6:ea:a8:52:b6:39:62:db:29:fa:61:1d:fd:d5:02:31:04:73: 
   50:ad:de:41:54:a5:e2:96:2d:9c:f4:68:b2:68:05:bb:39:47:
   ee:74:89:a2:8c:30:f0:f9:d7:d5:4b:3b:e2:95:6f:82:61:a3:
   c2:79:4c:f2:11:56:f8:2f:cc:fc:2b:4b:cb:3b:54:59:f0:8b:
   5b:70:e1:27:c3:57:25:eb:35:c6:07:ea:6d:0b:34:04:95:81:
   35:e6:64:c6:b8:72:e8:24:18:bd:ca:90:99:74:45:44:85:71:
   9e:7f:13:96:
History
Release version Command history
08.0.70 This command changes the certificate-client parameter to client-certificate.
09.0.10a The command added the device-certificate option.