03-31-2022 11:08 AM
Hi Guys,
I having one router ISR4331/K9 and getting below error lines. Anyone knows this issue?
i have checked crypto pki certificates status and they are valid.
315801: Mar 31 13:41:14 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
315802: Mar 31 13:42:14 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
315803: Mar 31 13:43:15 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
315804: Mar 31 13:44:15 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
315805: Mar 31 13:45:15 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
315806: Mar 31 13:46:16 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
315807: Mar 31 13:47:16 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
315808: Mar 31 13:48:16 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
315809: Mar 31 13:49:17 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
03-31-2022 11:25 AM
Hi,
It may be a clock issue on the device.
See the link for more info:
%PKI-3-CERTIFICATE_INVALID_EXPIRED : Certificate chain validation has failed. The certificate (SN: [chars]) has expired. Validity period ended on [chars] | |
---|---|
Explanation | The certificate validity period indicates that this certificate has expired |
Recommended Action | Check the system clock to see if its set correctly |
03-31-2022 11:37 AM
i checked and clock is set correctly
sh clo
14:36:20.931 EDT Thu Mar 31 2022
03-31-2022 09:03 PM
Do you have PKI infrastructure, how is your enrolment with PKI
can you post
show crypto pki certificates
show version
show run | inenrollment
04-01-2022 05:19 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide