Run the display pki certificate { ca | local | ocsp } [ realmrealm-name | filenamefile-name ] command to verify the content of CA, local, or OCSP server certificate loaded on the device.
Run the display pki certificatedefault { ca [ key-pair-type { rsa | sm2 } ] | local [ key-pair-type { rsa | sm2 { encipher | signature } } ] } command to verify the default CA certificate and local certificate.