Chapter 5.
CA: Finding and Revoking Certificates
A Certificate Manager (CM) agent can use the agent services page to find a specific certificate issued
by the Certificate System or to retrieve a list of certificates that match specified criteria. The certificates
which are retrieved can be examined or revoked by the agent. The CM agent can also manage the
certificate revocation list (CRL).
5.1. Basic Certificate Listing
It is possible to list certificates within a range of serial numbers. All certificates within the range may be
displayed or, if the agent selects, only those that are currently valid.
To find a specific certificate or to list certificates by serial number, do the following:
1. Open the CM agent services page.
2. Click List Certificates.
Figure 5.1. List Certificates
• To find a certificate with a specific serial number, enter the serial number in both the upper limit
and lower limit fields of the List Certificates form, in either decimal or hexadecimal form. Use 0x
to indicate the beginning of a hexadecimal number; for example, 0x00000006. Serial numbers
are displayed in hexadecimal form in the Search Results and Details pages.
45