Red Hat CERTIFICATE SYSTEM 7.2 - AGENT GUIDE Manual page 38

• Revoked. The certificate has been revoked.
• Expired. An expired certificate has passed the end of its validity period.
• Revoked and Expired. The certificate has passed its validity period and been revoked.
• Subject Name. Lists certificates belonging to a particular owner; it is possible to use wildcards in this field. For
more information on wildcard syntax, see step 5.
• Revocation Information. Lists certificates that have been revoked during a particular period or by a particular
agent. For example, an agent can list all certificates revoked between July 2005 and April 2006 or all certificates
revoked by the agent with the username admin.
• To list certificates revoked within a time period, select the day, month, and year from the drop-down lists to
identify the beginning and end of the period.
• To list certificates revoked by a particular agent, enter the name of the agent; it is possible to use wildcards in
this field. For more information on wildcard syntax, see step 5.
• Issuing Information. Lists certificates that have been issued during a particular period or by a particular agent. For
example, an agent can list all certificates issued between July 2005 and April 2006 or all certificates issued by the
agent with the username betatest.
• To list certificates issued within a time period, select the day, month, and year from the drop-down lists to
identify the beginning and end of the period.
• To list certificates issued by a particular agent, enter the name of the agent; it is possible to use wildcards in
this field. For more information on wildcard syntax, refer to step 5.
• Dates of Validity. List certificates that become effective or expire during a particular period. For example, an
agent can list all certificates that became valid on June 1, 2003, or that expired between January 1, 2006, and June
1, 2006.
It is also possible to list certificates that have a validity period of a certain length of time, such as all certificates
that are valid for less than one month.
• To list certificates that become effective or expire within a time period, select the day, month, and year from
the drop-down lists to identify the beginning and end of the period.
• To list certificates that have a validity period of a certain length in time, select Not greater than or Not less
than from the drop-down list, enter a number, and select a time unit from the drop-down list: days, weeks,
months, or years.
• Basic Constraints. Shows CA certificates that are based on the Basic Constraints extension.
• Type. Lists certain types of certificates, such as all certificates for subordinate CAs. This search works only for
certificates containing the Netscape Certificate Type extension, which stores type information. For each type,
choose from the drop-down list to find certificates where that type is On, Off, or Do Not Care.
4. To find a certificate with a specific subject name, use the Subject Name section. Select the check box, then enter the
subject name criteria. Enter values for the included search criteria and leave the others blank.
The standard tags or components are as follows:
• Email address. Narrows the search by email address.
• Common name. Finds certificates associated with a specific person or server.
• UserID. Searches certificates by the user ID for the person to whom the certificate belongs.
• Organization unit. Narrows the search to a specific division, department, or unit within an organization.
• Organization. Narrows the search by organization.
2. Advanced Certificate Search
Certificates