User's Manual

Chapter 32 Certificates
NXC CLI Reference Guide
206
32.5 Certificates Commands Examples
The following example creates a self-signed X.509 certificate with IP address 10.0.0.58 as the
common name. It uses the RSA key type with a 512 bit key. Then it displays the list of local
certificates. Finally it deletes the pkcs12request certification request.
Router# configure terminal
Router(config)# ca generate x509 name test_x509 cn-type ip cn 10.0.0.58 key-
type rsa key-len 512
Router(config)# show ca category local
certificate: default
type: SELF
subject: CN=nxc2500_B0B2DC6EA897
issuer: CN=nxc2500_B0B2DC6EA897
status: VALID
ID: nxc2500_B0B2DC6EA897
type: EMAIL
valid from: 2012-12-07 10:49:31 GMT
valid to: 2032-12-02 10:49:31 GMT
certificate: MyCertificate
type: SELF
subject: CN=[e-mail]
issuer: CN=[e-mail]
status: VALID
ID: [e-mail]
type: EMAIL
valid from: 2013-04-09 10:44:04 GMT
valid to: 2016-04-08 10:44:04 GMT
certificate: pkcs12request
type: REQ
subject: CN=1.1.1.2
issuer: none
status: VALID
ID: 1.1.1.2
type: IP
valid from: none
valid to: none
certificate: test_x509
type: SELF
subject: CN=10.0.0.58
issuer: CN=10.0.0.58
status: VALID
ID: 10.0.0.58
type: IP
valid from: 2013-06-07 15:52:52 GMT
valid to: 2016-06-06 15:52:52 GMT
Router(config)# no ca category local pkcs12request