Verifying the CA and Local Certificate Configuration

Configuring the validity check for the CA and local certificates has been completed.

Run the display pki realm [ realm-name ] command to check the PKI realm configuration.
Run the display pki certificate access-control-policy all command to check information of all the access control policies.
Run the display pki certificate attribute-group all command to check information of all the certificate attribute groups.
Run the display pki crl { realm realm-name | filename filename } command to check the CRL on the device.
Run the display pki certificate ocsp [ realm realm-name | filename file-name ] command to check the OCSP server certificate loaded to the device.
Run the display pki ocsp cache statistics command to check statistics about the OCSP response cache.
Run the display pki ocsp server down-information command to check the OCSP server Down records.