display certification

Function

The display certification command checks the configuration of certificate authentication.

Format

display certification { cert-anonymous | cert-challenge | user-cert-filter }

Parameters

Parameter	Description	Value
cert-anonymous	Check the configuration of certificate-anonymous authentication.	-
cert-challenge	Check the configuration of certificate-challenge authentication.	-
user-cert-filter	Check the filter configuration of the client certificate.	-

Views

Security view

Default Level

0: Visit level

Usage Guidelines

None

Example

# Display the filter configuration of the client certificate.

<sysname> system-view
[sysname] v-gateway gateway
[sysname-gateway] security
[sysname-gateway-security] display certification user-cert-filter
                                                                                
 User Certificate Filter Information                                            
 ------------------------------------------------------------------------------ 
 Start Validity Time:     07/16/2011 23:30:51                                   
 End Validity Time:       07/17/2011 23:30:54                                   
 Key Usage:               must have ability of digital signature                
 Issuer:                  HSCA                                                  
 ------------------------------------------------------------------------------ 
                                                                                
 ----End

**Table 1** Description of the **display certification user-cert-filter** command output
Item	Description
Start Validity Time	Validity start time.
End Validity Time	Validity end time.
Key Usage	Key Usage, whether the certificate should provide the digital signature function.
Issuer	The issuers of client certificate.