When you troubleshoot an SSL Decryption issue, which PAN-OS CLI command do you use to check the details of the Forward Trust certificate, Forward Untrust certificate, and SSL Inbound Inspection certif

The correct answer is D. show system setting ssl-decrypt certificate-cache. The command is specifically show system setting ssl-decrypt certificate-cache designed to list all the certificates loaded into the SSL decryption certificate cache. This cache includes the Forward Trust certificate, Forward Untrust certificate, and the SSL Inbound Inspection cer

Submitted by ngozi_ng· Apr 18, 2026Configuration Troubleshooting

Question

When you troubleshoot an SSL Decryption issue, which PAN-OS CLI command do you use to check the details of the Forward Trust certificate, Forward Untrust certificate, and SSL Inbound Inspection certificate?

Options

Ashow system setting ssl-decrypt certs
Bshow system setting ssl-decrypt certificate
Cdebug dataplane show ssl-decrypt ssl-stats
Dshow system setting ssl-decrypt certificate-cache

How the community answered

(54 responses)

A
2% (1)
B
6% (3)
C
4% (2)
D
89% (48)

Explanation

The command is specifically show system setting ssl-decrypt certificate-cache designed to list all the certificates loaded into the SSL decryption certificate cache. This cache includes the Forward Trust certificate, Forward Untrust certificate, and the SSL Inbound Inspection certificate. When you run this command, you get detailed information about each certificate, such as their names, expiration dates, fingerprints, and other relevant details. This information is crucial for troubleshooting because it helps determine if a certificate is misconfigured, expired, or otherwise causing issues with SSL decryption.

Topics

#SSL Decryption#CLI Commands#Certificates#Troubleshooting

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice