CACertificate

FieldTypePossible OperatorsDescription

Guid

TEXT

LIKE, EQUAL, NOT_EQUAL

A unique identifier that is a combination of GUID of selected Scan and Active Directory ObjectGUID of the object.

FSName

TEXT

LIKE, EQUAL, NOT_EQUAL

A special unique identifier that is a combination of the Thumbprint of the object and the FSName of the Certificate Authority.

SubjectName

TEXT

LIKE, EQUAL, NOT_EQUAL

The subject name of the CA certificate.

EndDate

DATE

SMALLER, LARGER, BETWEEN, EQUAL

Expiry date of the CA certificate.

StartDate

DATE

SMALLER, LARGER, BETWEEN, EQUAL

Issue date of the CA certificate.

isRootCertificate

BOOLEAN

N/A

Whether the CA certificate belongs to a root CA.

KeyUsage

TEXT

LIKE, EQUAL, NOT_EQUAL

Key usage extensions define the purpose of the public key contained in a certificate. You can use them to restrict the public key to as few or as many operations as needed.

Version

NUMBER

EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL

Version of the certificate.

isEnrollmentCertificate

BOOLEAN

N/A

Whether the CA certificate can process certificate requests and issue certificates.

Thumbprint

TEXT

LIKE, EQUAL, NOT_EQUAL

The hash value computed over the complete certificate, which includes all its fields, including the signature.

IsInNTAuthStore

BOOLEAN

N/A

Whether the CA certificate in the NTAuthCertificates container. This object defines one or more CA certificates in its cacertificate attribute and AD uses it during authentication. The domain controller checks if NTAuthCertificates object contains an entry for the CA specified in the authenticating certificate's Issuer field. If it is, authentication proceeds. If the certificate is not in the NTAuthCertificates object, authentication fails.

CertChain

TEXT

LIKE, EQUAL, NOT_EQUAL

The list of certificates that start from a server's certificate and terminate with the root certificate

IssuerName

TEXT

LIKE, EQUAL, NOT_EQUAL

The name of the certificate issuer.

Serial

TEXT

LIKE, EQUAL, NOT_EQUAL

A number that uniquely identifies the certificate and is issued by the certification authority.

SignatureAlgorithm

TEXT

LIKE, EQUAL, NOT_EQUAL

The algorithm used to create the signature of a certificate.

Last updated