1Y0-253 · Question #125
Which command should a Citrix Administrator run at the command-line interface to display the NetScaler certificate days to expiration?
The correct answer is C. show ssl certKey. See the full explanation below for the reasoning.
Question
Which command should a Citrix Administrator run at the command-line interface to display the NetScaler certificate days to expiration?
Options
- Ashow certFile
- Bshow ssl stats
- Cshow ssl certKey
- Dshow certParams
How the community answered
(26 responses)- A19% (5)
- B4% (1)
- C69% (18)
- D8% (2)
Community Discussion
5
Isolde G.Jun 25, 2026show ssl certKey is the right command here. It lists all bound certificates along with their validity period and days to expiration, which is exactly what you need when auditing cert lifetimes on a NetScaler appliance before they cause outages in your resource locations.
Grace U.Jun 27, 2026Isolde has it right, and worth adding for anyone who feels overwhelmed by the full output: if you already know the certificate name, passing it as an argument to that same command scopes the result down to just that one entry, which makes the expiration date a lot easier to spot quickly during a timed scenario.
Grace U.Jun 26, 2026I kept second-guessing myself and almost went with A because "certFile" sounds like it would show you the actual certificate details, but then I remembered that certFile just references the file on disk, not the bound certificate object with its expiration metadata. Once I thought about what "certKey" represents in NetScaler terminology, a certificate-key pair that is actively managed by the SSL subsystem, it clicked that show ssl certKey is the one that gives you the days-to-expiration field you actually need.
Jovan I.Jun 26, 2026show certFile lists the cert details including expiry, C just shows binding info.
Grace U.Jun 29, 2026Jovan, easy mix-up to make, but C is actually the one that surfaces the certificate details and expiry, while the binding-info view is what the other option gives you. Worth re-reading that command output description in the official docs, because the distinction there is what the exam is really testing.