cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1140
Views
5
Helpful
4
Replies

error lines on router ISR4331/K9

Noovi
Level 1
Level 1

Hi Guys,

I having one router ISR4331/K9 and getting below error lines. Anyone knows this issue?

i have checked crypto pki certificates status and they are valid. 

 

315801: Mar 31 13:41:14 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
315802: Mar 31 13:42:14 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
315803: Mar 31 13:43:15 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
315804: Mar 31 13:44:15 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
315805: Mar 31 13:45:15 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
315806: Mar 31 13:46:16 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
315807: Mar 31 13:47:16 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
315808: Mar 31 13:48:16 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021
315809: Mar 31 13:49:17 EDT: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed. The certificate (SN: 00E351F98BC7E19C1D0000000051048486) has expired. Validity period ended on 09:37:25 EDT Jul 13 2021

4 Replies 4

Reza Sharifi
Hall of Fame
Hall of Fame

Hi,

It may be a clock issue on the device.

See the link for more info:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/16_xe/smg/xe-16-10/b-sem-16-10-1/b-sem-16-10-1_chapter_0101.html

 

 
%PKI-3-CERTIFICATE_INVALID_EXPIRED : Certificate chain validation has failed. The certificate (SN: [chars]) has expired. Validity period ended on [chars]
Explanation The certificate validity period indicates that this certificate has expired
Recommended Action Check the system clock to see if its set correctly

i checked and clock is set correctly

 

sh clo
14:36:20.931 EDT Thu Mar 31 2022

balaji.bandi
Hall of Fame
Hall of Fame

Do you have PKI infrastructure, how is your enrolment with PKI

can you post 

 

show crypto pki certificates
show version
show run | in enrollment

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Hi,

Please find attached.