> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/active-directory-entities/cacertificate.md).

# CACertificate

| Field                   | Type    | Possible Operators                                             | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| ----------------------- | ------- | -------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Guid                    | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A unique identifier that is a combination of GUID of selected `Scan` and Active Directory `ObjectGUID` of the object.                                                                                                                                                                                                                                                                                                                                                |
| FSName                  | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A special unique identifier that is a combination of the `Thumbprint of the object` and the `FSName of the Certificate Authority`.                                                                                                                                                                                                                                                                                                                                   |
| SubjectName             | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The subject name of the CA certificate.                                                                                                                                                                                                                                                                                                                                                                                                                              |
| EndDate                 | DATE    | SMALLER, LARGER, BETWEEN, EQUAL, IS\_EMPTY                     | Expiry date of the CA certificate.                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| StartDate               | DATE    | SMALLER, LARGER, BETWEEN, EQUAL, IS\_EMPTY                     | Issue date of the CA certificate.                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| isRootCertificate       | BOOLEAN | N/A (toggle)                                                   | Whether the CA certificate belongs to a root CA.                                                                                                                                                                                                                                                                                                                                                                                                                     |
| KeyUsage                | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Key usage extensions define the purpose of the public key contained in a certificate. You can use them to restrict the public key to as few or as many operations as needed.                                                                                                                                                                                                                                                                                         |
| Version                 | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Version of the certificate.                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| isEnrollmentCertificate | BOOLEAN | N/A (toggle)                                                   | Whether the CA certificate can process certificate requests and issue certificates.                                                                                                                                                                                                                                                                                                                                                                                  |
| Thumbprint              | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The hash value computed over the complete certificate, which includes all its fields, including the signature.                                                                                                                                                                                                                                                                                                                                                       |
| IsInNTAuthStore         | BOOLEAN | N/A (toggle)                                                   | Whether the CA certificate in the `NTAuthCertificates` container. This object defines one or more CA certificates in its `cacertificate` attribute and AD uses it during authentication. The domain controller checks if `NTAuthCertificates` object contains an entry for the CA specified in the authenticating certificate's Issuer field. If it is, authentication proceeds. If the certificate is not in the `NTAuthCertificates` object, authentication fails. |
| CertChain               | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The list of certificates that start from a server's certificate and terminate with the root certificate                                                                                                                                                                                                                                                                                                                                                              |
| IssuerName              | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The name of the certificate issuer.                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| Serial                  | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A number that uniquely identifies the certificate and is issued by the certification authority.                                                                                                                                                                                                                                                                                                                                                                      |
| SignatureAlgorithm      | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The algorithm used to create the signature of a certificate.                                                                                                                                                                                                                                                                                                                                                                                                         |
| Tier                    | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Tier level Forestall assigned to the object: `0` (Tier 0), `1` (Tier 1) or `2` (Tier 2). Lower is more privileged.                                                                                                                                                                                                                                                                                                                                                   |