FW-1 and FW-2 are in a cluster. Currently the PKI objects are in sync:
FW-1(M)-> get pki x509 list cert
Getting OTHER PKI OBJECT ...
IDX ID num X509 Certificate Subject Distinguish Name
================================================================================
0000 151519236 CA CERT friendly name <4>
OU=Class 3 Public Primary Certification Authority,O=VeriSign
, Inc.,C=US,
Expire on 08-01-2028 23:59(UTC time), Issued By:
OU=Class 3 Public Primary Certification Authority,O=VeriSign
, Inc.,C=US,
0001 24379395 LOCAL CERT friendly name <3>
CN=self-signed,CN=Test,CN=Lab.jtaclab.net,CN=dsa-key,CN=XX,
OU=Lab,
Expire on 08-17-2023 14:59(UTC time), Issued By:
CN=self-signed,CN=Test,CN=Lab.jtaclab.net,CN=dsa-key,CN=XX,
OU=Lab,
0002 151519238 CA CERT friendly name <6>
CN=VeriSign Class 3 Secure Server CA,OU=Terms of use at http
s://www.verisign.com/rpa (c)05,OU=VeriSign Trust Network,O=V
eriSign, Inc.,C=US,
Expire on 01-18-2015 23:59(UTC time), Issued By:
OU=Class 3 Public Primary Certification Authority,O=VeriSign
, Inc.,C=US,
================================================================================
FW-2(B)-> get pki x509 list cert
Getting OTHER PKI OBJECT ...
IDX ID num X509 Certificate Subject Distinguish Name
================================================================================
0000 151519236 CA CERT friendly name <4>
OU=Class 3 Public Primary Certification Authority,O=VeriSign
, Inc.,C=US,
Expire on 08-01-2028 23:59(UTC time), Issued By:
OU=Class 3 Public Primary Certification Authority,O=VeriSign
, Inc.,C=US,
0001 24379395 LOCAL CERT friendly name <3>
CN=self-signed,CN=Test,CN=Lab.jtaclab.net,CN=dsa-key,CN=XX,
OU=Lab,
Expire on 08-17-2023 14:59(UTC time), Issued By:
CN=self-signed,CN=Test,CN=Lab.jtaclab.net,CN=dsa-key,CN=XX,
OU=Lab,
0002 151519238 CA CERT friendly name <6>
CN=VeriSign Class 3 Secure Server CA,OU=Terms of use at http
s://www.verisign.com/rpa (c)05,OU=VeriSign Trust Network,O=V
eriSign, Inc.,C=US,
Expire on 01-18-2015 23:59(UTC time), Issued By:
OU=Class 3 Public Primary Certification Authority,O=VeriSign
, Inc.,C=US,
================================================================================