Viewing the Validity of Netvisor ONE Certificates
Starting with Netvisor ONE version 6.1.1, you can view the validity of Netvisor ONE certificates on your switch. That is, after you upgrade to version 6.1.1, you can check the validity of certificates available on Netvisor ONE using the cert-switch-show command. You can also REST API command to verify the validity of certificates.
The command output also gets logged into tech-support-show command output and can be helpful during a customer support (TAC) call.
To check the validity of certificates on a switch, use the command:
CLI (network-admin@switch) > cert-switch-show
name: /usr/nvos/cert/core.pem
cert-type: server
subject: /C=US/ST=California/O=Pluribus Networks/OU=Core
Encryption/CN=Core Encryption
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 291
valid-from: Mar 9 10:19:06 2021 GMT
valid-to: Mar 4 10:19:06 2041 GMT
status: Certificate valid for 7174 days
----------------------------------------
name: /usr/nvos/cert/cacert.pem
cert-type: ca
subject: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 17400531076958470354
valid-from: Apr 9 11:00:34 2021 GMT
valid-to: Apr 4 11:00:34 2041 GMT
status: Certificate valid for 7205 days
----------------------------------------
name: /usr/nvos/cert/pkg.pem
cert-type: server
subject: /C=US/ST=California/O=Pluribus
Networks/OU=Package/CN=Package
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 31
valid-from: Oct 15 19:24:41 2012 GMT
valid-to: Oct 13 19:24:41 2022 GMT
status: Certificate valid for 458 days
----------------------------------------
name: /usr/nvos/cert/newswitch.pem
cert-type: server
subject: /C=US/ST=California/O=Pluribus Networks/OU=New
Switch/CN=New Pluribus Switch
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 290
valid-from: Mar 9 10:18:37 2021 GMT
valid-to: Mar 4 10:18:37 2041 GMT
status: Certificate valid for 7174 days
----------------------------------------
name: /var/nvos/cert/switch.pem
cert-type: server
subject: /C=US/ST=California/O=Pluribus
Networks/OU=Switch/CN=hostid:184560120 serial:2126PN8500255
issuer: /C=US/ST=California/O=Pluribus Networks/CN=Pluribus Update
Server CA
serial-number: 12343
valid-from: Jun 21 07:00:00 2021 GMT
valid-to: Jun 22 06:59:59 2041 GMT
status: Certificate valid for 7284 days
----------------------------------------
name: /var/nvos/cert/cacerts.pem
cert-type: ca
subject: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 17400531076958470354
valid-from: Apr 9 11:00:34 2021 GMT
valid-to: Apr 4 11:00:34 2041 GMT
status: Certificate valid for 7205 days
----------------------------------------
name: /var/nvos/cert/cacerts.pem
cert-type: ca
subject: /C=US/ST=California/O=Pluribus Networks/OU=Update
Servers/CN=Pluribus Update DNI CA
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 295
valid-from: Mar 9 14:34:32 2021 GMT
valid-to: Mar 4 14:34:32 2041 GMT
status: Certificate valid for 7174 days
----------------------------------------
name: /var/nvos/cert/cacerts.pem
cert-type: ca
subject: /C=US/ST=California/O=Pluribus Networks/OU=Update
Servers/CN=Pluribus Update Celestica CA
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 296
valid-from: Mar 9 14:40:07 2021 GMT
valid-to: Mar 4 14:40:07 2041 GMT
status: Certificate valid for 7174 days
----------------------------------------
name: /var/nvos/cert/cacerts.pem
cert-type: ca
subject: /C=US/ST=California/O=Pluribus Networks/CN=Pluribus Update
Leadman CA
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 298
valid-from: Mar 9 14:45:58 2021 GMT
valid-to: Mar 4 14:45:58 2041 GMT
status: Certificate valid for 7174 days
----------------------------------------
name: /var/nvos/cert/cacerts.pem
cert-type: ca
subject: /C=US/ST=California/O=Pluribus Networks/OU=Update
Servers/CN=cb-update.pluribusnetworks.com
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 297
valid-from: Mar 9 14:43:55 2021 GMT
valid-to: Mar 4 14:43:55 2041 GMT
status: Certificate valid for 7174 days
----------------------------------------
name: /var/nvos/cert/cacerts.pem
cert-type: ca
subject: /C=US/ST=California/O=Pluribus Networks/OU=Update
Servers/CN=celestica-update2.pluribusnetworks.com
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 299
valid-from: Mar 9 14:47:48 2021 GMT
valid-to: Mar 4 14:47:48 2041 GMT
status: Certificate valid for 7174 days
----------------------------------------
name: /var/nvos/cert/cacerts.pem
cert-type: ca
subject: /C=US/ST=California/O=Pluribus Networks/OU=Update
Servers/CN=celestica-update.pluribusnetworks.com
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 300
valid-from: Mar 9 14:48:29 2021 GMT
valid-to: Mar 4 14:48:29 2041 GMT
status: Certificate valid for 7174 days
----------------------------------------
name: /var/nvos/cert/cacerts.pem
cert-type: ca
subject: /C=US/ST=California/O=Pluribus Networks/OU=Update
Servers/CN=ct-update2.pluribusnetworks.com
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 301
valid-from: Mar 9 14:49:17 2021 GMT
valid-to: Mar 4 14:49:17 2041 GMT
status: Certificate valid for 7174 days
----------------------------------------
name: /var/nvos/cert/cacerts.pem
cert-type: ca
subject: /C=US/ST=California/O=Pluribus Networks/OU=Update
Servers/CN=ct-update.pluribusnetworks.com
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 302
valid-from: Mar 9 14:49:56 2021 GMT
valid-to: Mar 4 14:49:56 2041 GMT
status: Certificate valid for 7174 days
----------------------------------------
name: /var/nvos/cert/cacerts.pem
cert-type: ca
subject: /C=US/ST=California/O=Pluribus Networks/OU=Update
Servers/CN=staging-update.pluribusnetworks.com
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 303
valid-from: Mar 9 14:50:26 2021 GMT
valid-to: Mar 4 14:50:26 2041 GMT
status: Certificate valid for 7174 days
----------------------------------------
name: /var/nvos/cert/cacerts.pem
cert-type: ca
subject: /C=US/ST=California/O=Pluribus Networks/OU=Update
Servers/CN=Pluribus Update Manufacturing CA
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 110
valid-from: Nov 4 01:08:14 2014 GMT
valid-to: Nov 1 01:08:14 2024 GMT
status: Certificate valid for 1207 days
----------------------------------------
name: /var/nvos/cert/cacerts.pem
cert-type: ca
subject: /C=US/ST=California/O=Pluribus Networks/CN=Pluribus Update
Server CA
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 304
valid-from: Mar 9 14:51:10 2021 GMT
valid-to: Mar 4 14:51:10 2041 GMT
status: Certificate valid for 7174 days
----------------------------------------
name: /var/nvos/cert/cacerts.pem
cert-type: ca
subject: /C=US/ST=California/O=Pluribus Networks/OU=Update
Servers/CN=Pluribus Update Advantech CA
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 344
valid-from: Apr 21 12:02:10 2021 GMT
valid-to: Apr 16 12:02:10 2041 GMT
status: Certificate valid for 7217 days
----------------------------------------
name: /var/nvos/cert/cacerts.pem
cert-type: ca
subject: /C=US/ST=California/O=Pluribus Networks/OU=Update
Servers/CN=Pluribus Update staging CA
issuer: /O=Pluribus Networks/L=Palo
Alto/ST=California/C=US/CN=Pluribus Update Root CA
serial-number: 101
valid-from: Jun 2 22:30:14 2014 GMT
valid-to: May 30 22:30:14 2024 GMT
status: Certificate valid for 1053 days
To view the certificate expiration alert, use the command:
CLI (network-admin@switch) > cert-expiration-alert-show
switch: sff-pvt-ptf
netvisor: yes
days-before-expiration(d): 180