Cisco 6500 - Catalyst Series 10 Gigabit EN Interface Module Expansion, Configuration Manual, Page: 224 / 742

12-8
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Chapter 12 Configuring Certificates
Certificate Configuration
For example, to manually import PKCS12 data to the trustpoint called newton with the passphrase
cisco123, enter the following command:
hostname (config)# crypto ca import newton pkcs12 cisco123
Enter the base 64 encoded pkcs12.
End with a blank line or the word "quit" on a line by itself:
[ PKCS12 data omitted ]
quit
INFO: Import PKCS12 operation completed successfully
Step 2 To display an imported certificate and verify that it has been imported correctly, enter the following
command:
hostname (config)# show crypto ca certificates
The following is sample output from the show crypto ca certificates command, which lists the name of
the trustpoint, newton:
CA Certificate
Status: Available
Certificate Serial Number: 18dad19e267de8bb4a2158cdcc6b3b4a
Certificate Usage: General Purpose
Public Key Type: RSA (2048 bits)
Issuer Name:
cn=VeriSign Class 3 Public Primary Certification Authority - G5
ou=(c) 2006 VeriSign\, Inc. - For authorized use only
ou=VeriSign Trust Network
o=VeriSign\, Inc.
c=US
Subject Name:
cn=VeriSign Class 3 Public Primary Certification Authority - G5
ou=(c) 2006 VeriSign\, Inc. - For authorized use only
ou=VeriSign Trust Network
o=VeriSign\, Inc.
c=US
Validity Date:
start date: 23:00:00 IST Nov 7 2006
end date: 22:59:59 IST Jul 16 2036
Associated Trustpoints: newton-1
Certificate
Status: Available
Certificate Serial Number: 5b178bf40eda86f320c4302cb055a743
Certificate Usage: General Purpose
Public Key Type: RSA (1024 bits)
Issuer Name:
cn=VeriSign Class 3 Extended Validation SSL CA
ou=Terms of use at https://www.verisign.com/rpa (c)06
ou=VeriSign Trust Network
o=VeriSign\, Inc.
c=US
Subject Name:
cn=atl-lx-sbacchus.cisco.com
o=Cisco Systems\, Inc
sa=170 West Tasman Dr
l=San Jose
st=California
pc=95134
c=US
serialNumber=C1183477
2.5.4.15=#131256312e302c20436c6175736520352e286229
1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961
1.3.6.1.4.1.311.60.2.1.3=#13025553