> For the complete documentation index, see [llms.txt](https://docs.forestall.io/fsprotect/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/cacertificate.md).

# CACertificate

| Field                       | Type    | Possible Operators                                                       | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| --------------------------- | ------- | ------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Guid**                    | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | A unique identifier that is a combination of GUID of selected `Scan` and Active Directory `ObjectGUID` of the object.                                                                                                                                                                                                                                                                                                                                                |
| **FSName**                  | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | A special unique identifier that is a combination of the `Thumbprint of the object` and the `FSName of the Certificate Authority`.                                                                                                                                                                                                                                                                                                                                   |
| **SubjectName**             | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | The subject name of the CA certificate.                                                                                                                                                                                                                                                                                                                                                                                                                              |
| **EndDate**                 | DATE    | `SMALLER`, `LARGER`, `BETWEEN`, `EQUAL`                                  | Expiry date of the CA certificate.                                                                                                                                                                                                                                                                                                                                                                                                                                   |
| **StartDate**               | DATE    | `SMALLER`, `LARGER`, `BETWEEN`, `EQUAL`                                  | Issue date of the CA certificate.                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| **isRootCertificate**       | BOOLEAN | `N/A`                                                                    | Whether the CA certificate belongs to a root CA.                                                                                                                                                                                                                                                                                                                                                                                                                     |
| **KeyUsage**                | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | Key usage extensions define the purpose of the public key contained in a certificate. You can use them to restrict the public key to as few or as many operations as needed.                                                                                                                                                                                                                                                                                         |
| **Version**                 | NUMBER  | `EQUAL`, `BETWEEN`, `SMALLER`, `LARGER`, `SMALLER_EQUAL`, `LARGER_EQUAL` | Version of the certificate.                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| **isEnrollmentCertificate** | BOOLEAN | `N/A`                                                                    | Whether the CA certificate can process certificate requests and issue certificates.                                                                                                                                                                                                                                                                                                                                                                                  |
| **Thumbprint**              | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | The hash value computed over the complete certificate, which includes all its fields, including the signature.                                                                                                                                                                                                                                                                                                                                                       |
| **IsInNTAuthStore**         | BOOLEAN | `N/A`                                                                    | Whether the CA certificate in the `NTAuthCertificates` container. This object defines one or more CA certificates in its `cacertificate` attribute and AD uses it during authentication. The domain controller checks if `NTAuthCertificates` object contains an entry for the CA specified in the authenticating certificate's Issuer field. If it is, authentication proceeds. If the certificate is not in the `NTAuthCertificates` object, authentication fails. |
| **CertChain**               | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | The list of certificates that start from a server's certificate and terminate with the root certificate                                                                                                                                                                                                                                                                                                                                                              |
| **IssuerName**              | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | The name of the certificate issuer.                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| **Serial**                  | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | A number that uniquely identifies the certificate and is issued by the certification authority.                                                                                                                                                                                                                                                                                                                                                                      |
| **SignatureAlgorithm**      | TEXT    | `LIKE`,`NOT_LIKE EQUAL`,`NOT_EQUAL`,`IS_EMPTY`                           | The algorithm used to create the signature of a certificate.                                                                                                                                                                                                                                                                                                                                                                                                         |