The display app-proxy dynamic-cert cache command displays the cache of dynamic certificate issuing of the SSL proxy.
| Parameter | Description | Value |
|---|---|---|
all-systems |
Including all systems, including the root system and virtual system. |
- |
# Display the cache of dynamic certificate issuing of the SSL proxy.
<sysname> display app-proxy dynamic-cert cache
current/total cache size: 1/512
hit times: 25
Aproxy Issuer Certificate:
HitTime:25
Orignal Certificate:
Data:
Serial Number: 1 (0x1)
Issuer: C=cn, ST=zj, L=hz, O=hw, OU=fw, CN=RootCA
Validity
Not Before: May 25 08:27:03 2016 GMT
Not After : May 23 08:27:03 2026 GMT
Subject: C=cn, ST=zj, L=hz, O=hw, OU=fw, CN=www.example.com
Aproxy Certificate:
Data:
Serial Number: 1 (0x1)
Issuer: C=CN, ST=JS, L=NJ, O=HW, OU=VPN, CN=CA-210235G7LN0123456789
Validity
Not Before: May 25 08:27:03 2016 GMT
Not After : May 23 08:27:03 2026 GMT
Subject: C=cn, ST=zj, L=hz, O=hw, OU=fw, CN=www.example.com
Table 1 lists the description of the display app-proxy dynamic-cert cache command output.
Item |
Description |
|---|---|
current/total cache size |
Number of already cached certificate groups and total number of certificate groups to be cached. A certificate group includes the original certificates and dynamically issued certificates. |
hit times |
Number of times all cached certificates are sent. If a user accesses a website for the second time after the certificate is cached, the device will no longer needs to issue the certificate again. It can directly send the cached certificate to the user. |
Aproxy Issuer Certificate |
A group of cached certificates. |
HitTime |
Number of times the group of cached certificates are sent. If a user accesses a website for the second time after the certificate is cached, the device will no longer needs to issue the certificate again. It can directly send the cached certificate to the user. |
Orignal Certificate |
Original certificate. |
Aproxy Certificate |
Dynamically issued certificate. |