Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

SSL certificate validation date

Why is it that on an SSL module, certificate validity dates are different when cheking

"show crypto ca trustpoints" and

"show ssl-proxy certificate-history" ?

Doesn't the "certificate-history" show the current one as well?

Which one should be tracked for validity end date?

SSL001#show crypto ca trustpoints testing123

Certificate

Subject:

Name: testing123

CN = testing123

OU = Terms of use at http://www.verisign.com

O = WWW

L = WW

ST = WW

C = WW

CRL Distribution Point:

http://SVRIntl-crl.verisign.com/SVRIntl.crl

Validity Date:

start date: 00:00:00 UTC Apr 11 2006

end date: 23:59:59 UTC Apr 10 2008

renew date: 00:00:00 UTC Jan 1 1970

Associated Trustpoints: testing123

--------

SSL001#show ssl-proxy certificate-history service proxyssl

Record 132, Timestamp: 3w6d, 21:34:55 UTC May 23 2006

Installed Service Certificate, Index 131

Proxy Service: proxyssl, Trust Point: testing123

Validity Start Time: 15:31:50 UTC Nov 15 2005

End Time: 15:31:50 UTC Nov 15 2006

Renew Time: 00:00:00 UTC Jan 1 1970

Thanks

173
Views
0
Helpful
0
Replies