Use "show crypto ca cert" command to display information about your certificate, the certificate of the CA, and any Registration Authority (RA) certificates and check if they are proper. Use command "show crypto isakmp sa" to check status of IKE SAs.