/certificate

官方原文约 5 分钟阅读

当前显示英文原文，切换到「中文」可查看译文。

certificate

RouterOS directory reference for /certificate.

certificate

Type: Directory

Flag	Name	Description
`K`	private-key	private-key
`L`	crl	crl
`C`	smart-card-key	smart-card-key
`A`	authority	authority
`I`	issued	issued
`R`	revoked	revoked
`E`	expired	expired
`T`	trusted	trusted
`a`	acme-managed	acme-managed
`D`	dynamic	dynamic

Argument	Type	Description
`active`	switch
`inactive`	switch
`name`	string
`trust-store`	alt { all: enum (all) , component: ubit (ipsec, wpa-eap, capsman, fetch, sstp, ovpn, mqtt, email, netwatch, radius, container, userman, lora, wiliot, openflow, tr069, dot1x, dns, www, api, reverse-proxy, logging) }
`digest-algorithm`	enum (md5 \| sha1 \| sha256 \| sha384 \| sha512)
`trusted`	bool
`common-name`	string
`organization`	string
`unit`	string
`locality`	string
`state`	string
`country`	string
`subject-alt-name`	object { alt-name: composite { type: enum (IP \| DNS \| email) , value: alt { ip: alt { ipv6: ip6Addr , ip: ipAddr } , string: string } } }
`key-size`	enum (prime256v1 \| secp384r1 \| secp521r1 \| 1024 \| 1536 \| 2048 \| 4096 \| 8192) { 1024:1024, 1536:1536, 2048:2048, 4096:4096, 8192:8192 }
`key-usage`	ubit (digital-signature, content-commitment, key-encipherment, data-encipherment, key-agreement, key-cert-sign, crl-sign, encipher-only, decipher-only, tls-server, tls-client, code-sign, email-protect, timestamp, ocsp-sign, dvcs)
`days-valid`	num

Read-only Argument	Type	Description
`ca-crl-host`	string
`ca`	enum
`scep-url`	string
`fingerprint`	string
`req-fingerprint`	string
`ca-fingerprint`	string
`expires-after`	time
`challenge-password`	string
`domain-names`	string
`directory-url`	string
`acme-status`	string
`revoked`	date
`status`	string
`issuer`	multi { array-id, issuer: string }
`key-type`	enum (rsa \| dsa \| ec)
`invalid-before`	date
`invalid-after`	date
`serial-number`	string
`akid`	string
`skid`	string