To check the expiration date of the SSL certificate on a Cisco DNA Center (DNAC) appliance using the Command Line Interface (CLI), you can follow these steps:
1. Access the DNAC appliance via SSH or console cable.
2. Log in to the DNAC CLI with appropriate credentials.
3. Once you're logged in, you can use the following command to check the SSL certificate expiration date:
show crypto pki certificates <certificate-name>
Replace <certificate-name> with the actual name of the certificate you want to check. If you're not sure of the certificate name, you can use the following command to list all certificates:
show crypto pki certificates
Look for the certificate entry that corresponds to the DNAC's SSL certificate and note the "Valid from" and "Valid until" dates. The "Valid until" date is the certificate's expiration date.
Here's an example of what the output might look like:
Certificate
Status: Available
Certificate Serial Number: <serial-number>
Certificate Usage: General Purpose
Issuer: CN=Example CA
Subject: CN=dnac.example.com
Valid from: <start-date>
Valid until: <expiry-date>
Fingerprint: <fingerprint>
In the example above, you would be interested in the "Valid until" date, which indicates when the SSL certificate will expire.
Keep in mind that you may need administrative privileges to access this information, and it's essential to regularly check and renew SSL certificates before they expire to ensure secure communication with your DNAC appliance.
