Viewing the Validity of NetVisor OS Certificates



Starting with NetVisor OS version 6.1.1, you can view the validity of NetVisor OS certificates on your switch.  That is, after you upgrade to version 6.1.1, you can check the validity of certificates available on NetVisor OS using the cert-switch-show command. You can also REST API command to verify the validity of certificates.


The command output also gets logged into tech-support-show command output and can be helpful during a customer support (TAC) call.


To check the validity of certificates on a switch, use the command:


CLI (network-admin@switch) > cert-switch-show


name:                /usr/nvos/cert/core.pem

cert-type:           server

subject:             /C=US/ST=California/O=Pluribus Networks/OU=Core

Encryption/CN=Core Encryption

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       291

valid-from:          Mar  9 10:19:06 2021 GMT

valid-to:            Mar  4 10:19:06 2041 GMT

status:              Certificate valid for 7174 days

----------------------------------------

name:                /usr/nvos/cert/cacert.pem

cert-type:           ca

subject:             /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       17400531076958470354

valid-from:          Apr  9 11:00:34 2021 GMT

valid-to:            Apr  4 11:00:34 2041 GMT

status:              Certificate valid for 7205 days

----------------------------------------

name:                /usr/nvos/cert/pkg.pem

cert-type:           server

subject:             /C=US/ST=California/O=Pluribus

Networks/OU=Package/CN=Package

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       31

valid-from:          Oct 15 19:24:41 2012 GMT

valid-to:            Oct 13 19:24:41 2022 GMT

status:              Certificate valid for 458 days

----------------------------------------

name:                /usr/nvos/cert/newswitch.pem

cert-type:           server

subject:             /C=US/ST=California/O=Pluribus Networks/OU=New

Switch/CN=New Pluribus Switch

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       290

valid-from:          Mar  9 10:18:37 2021 GMT

valid-to:            Mar  4 10:18:37 2041 GMT

status:              Certificate valid for 7174 days

----------------------------------------

name:                /var/nvos/cert/switch.pem

cert-type:           server

subject:             /C=US/ST=California/O=Pluribus

Networks/OU=Switch/CN=hostid:184560120 serial:2126PN8500255

issuer:              /C=US/ST=California/O=Pluribus Networks/CN=Pluribus Update

Server CA

serial-number:       12343

valid-from:          Jun 21 07:00:00 2021 GMT

valid-to:            Jun 22 06:59:59 2041 GMT

status:              Certificate valid for 7284 days

----------------------------------------

name:                /var/nvos/cert/cacerts.pem

cert-type:           ca

subject:             /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       17400531076958470354

valid-from:          Apr  9 11:00:34 2021 GMT

valid-to:            Apr  4 11:00:34 2041 GMT

status:              Certificate valid for 7205 days

----------------------------------------

name:                /var/nvos/cert/cacerts.pem

cert-type:           ca

subject:             /C=US/ST=California/O=Pluribus Networks/OU=Update

Servers/CN=Pluribus Update DNI CA

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       295

valid-from:          Mar  9 14:34:32 2021 GMT

valid-to:            Mar  4 14:34:32 2041 GMT

status:              Certificate valid for 7174 days

----------------------------------------

name:                /var/nvos/cert/cacerts.pem

cert-type:           ca

subject:             /C=US/ST=California/O=Pluribus Networks/OU=Update

Servers/CN=Pluribus Update Celestica CA

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       296

valid-from:          Mar  9 14:40:07 2021 GMT

valid-to:            Mar  4 14:40:07 2041 GMT

status:              Certificate valid for 7174 days

----------------------------------------

name:                /var/nvos/cert/cacerts.pem

cert-type:           ca

subject:             /C=US/ST=California/O=Pluribus Networks/CN=Pluribus Update

Leadman CA

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       298

valid-from:          Mar  9 14:45:58 2021 GMT

valid-to:            Mar  4 14:45:58 2041 GMT

status:              Certificate valid for 7174 days

----------------------------------------

name:                /var/nvos/cert/cacerts.pem

cert-type:           ca

subject:             /C=US/ST=California/O=Pluribus Networks/OU=Update

Servers/CN=cb-update.pluribusnetworks.com

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       297

valid-from:          Mar  9 14:43:55 2021 GMT

valid-to:            Mar  4 14:43:55 2041 GMT

status:              Certificate valid for 7174 days

----------------------------------------

name:                /var/nvos/cert/cacerts.pem

cert-type:           ca

subject:             /C=US/ST=California/O=Pluribus Networks/OU=Update

Servers/CN=celestica-update2.pluribusnetworks.com

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       299

valid-from:          Mar  9 14:47:48 2021 GMT

valid-to:            Mar  4 14:47:48 2041 GMT

status:              Certificate valid for 7174 days

----------------------------------------

name:                /var/nvos/cert/cacerts.pem

cert-type:           ca

subject:             /C=US/ST=California/O=Pluribus Networks/OU=Update

Servers/CN=celestica-update.pluribusnetworks.com

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       300

valid-from:          Mar  9 14:48:29 2021 GMT

valid-to:            Mar  4 14:48:29 2041 GMT

status:              Certificate valid for 7174 days

----------------------------------------

name:                /var/nvos/cert/cacerts.pem

cert-type:           ca

subject:             /C=US/ST=California/O=Pluribus Networks/OU=Update

Servers/CN=ct-update2.pluribusnetworks.com

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       301

valid-from:          Mar  9 14:49:17 2021 GMT

valid-to:            Mar  4 14:49:17 2041 GMT

status:              Certificate valid for 7174 days

----------------------------------------

name:                /var/nvos/cert/cacerts.pem

cert-type:           ca

subject:             /C=US/ST=California/O=Pluribus Networks/OU=Update

Servers/CN=ct-update.pluribusnetworks.com

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       302

valid-from:          Mar  9 14:49:56 2021 GMT

valid-to:            Mar  4 14:49:56 2041 GMT

status:              Certificate valid for 7174 days

----------------------------------------

name:                /var/nvos/cert/cacerts.pem

cert-type:           ca

subject:             /C=US/ST=California/O=Pluribus Networks/OU=Update

Servers/CN=staging-update.pluribusnetworks.com

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       303

valid-from:          Mar  9 14:50:26 2021 GMT

valid-to:            Mar  4 14:50:26 2041 GMT

status:              Certificate valid for 7174 days

----------------------------------------

name:                /var/nvos/cert/cacerts.pem

cert-type:           ca

subject:             /C=US/ST=California/O=Pluribus Networks/OU=Update

Servers/CN=Pluribus Update Manufacturing CA

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       110

valid-from:          Nov  4 01:08:14 2014 GMT

valid-to:            Nov  1 01:08:14 2024 GMT

status:              Certificate valid for 1207 days

----------------------------------------

name:                /var/nvos/cert/cacerts.pem

cert-type:           ca

subject:             /C=US/ST=California/O=Pluribus Networks/CN=Pluribus Update

Server CA

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       304

valid-from:          Mar  9 14:51:10 2021 GMT

valid-to:            Mar  4 14:51:10 2041 GMT

status:              Certificate valid for 7174 days

----------------------------------------

name:                /var/nvos/cert/cacerts.pem

cert-type:           ca

subject:             /C=US/ST=California/O=Pluribus Networks/OU=Update

Servers/CN=Pluribus Update Advantech CA

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       344

valid-from:          Apr 21 12:02:10 2021 GMT

valid-to:            Apr 16 12:02:10 2041 GMT

status:              Certificate valid for 7217 days

----------------------------------------

name:                /var/nvos/cert/cacerts.pem

cert-type:           ca

subject:             /C=US/ST=California/O=Pluribus Networks/OU=Update

Servers/CN=Pluribus Update staging CA

issuer:              /O=Pluribus Networks/L=Palo

Alto/ST=California/C=US/CN=Pluribus Update Root CA

serial-number:       101

valid-from:          Jun  2 22:30:14 2014 GMT

valid-to:            May 30 22:30:14 2024 GMT

status:              Certificate valid for 1053 days


To view the certificate expiration alert, use the command:


CLI (network-admin@switch) > cert-expiration-alert-show

switch:                    sff-pvt-ptf

netvisor:                  yes

days-before-expiration(d): 180

north
    keyboard_arrow_up
    keyboard_arrow_down
    description
    print
    feedback
    support
    business
    rss_feed
    south