To test whether a syslog CA certificate has been imported on the device, in privileged EXEC mode, enter the no crypto import syslogca command and examine the message returned by the system. The command returns an error if there is no syslog CA certificate on the device. If a syslog CA certificate exists on the device, you are prompted to delete it. Enter the no certutil syslogcacert command to retain the certificate.
Example for when no syslog CA certificate is present
SLX# no crypto import syslogca % Error: syslog CA certificate does not exist.
Example for when a syslog CA certificate exists on the device
SLX# no crypto import syslogca Do you want to delete syslog CA certificate? [y/n]:n