The current pki ca-cert-request-profile-find/show commands return the following information about a certificate profile to end users:

• profile ID
• name
• description
• renewal
• input parameter name, description, syntax

However, the CLI does not return the required authentication type for the profile, which is important in order to submit a certificate request successfully using the pki ca-cert-request-submit command.

The pki ca-profile-show command does return the required authentication type, but this command is only accessible by the admin, and the info only appears using the --raw option.

To improve CLI usability, the required authentication type should be easily accessible by the end users and the admin as well. The information can also be used by the CLI to enforce the authentication before sending the certificate request to the server.

See also ticket #2289.