Red Hat CERTIFICATE SYSTEM 7.3 - AGENT GUIDE Manual page 55

and year from the drop-down lists to identify the beginning and end of the period.
• To list certificates that have a validity period of a certain length in time, select Not greater than
or Not less than from the drop-down list, enter a number, and select a time unit from the drop-
down list: days, weeks, months, or years.
• Basic Constraints. Shows CA certificates that are based on the Basic Constraints extension.
• Type. Lists certain types of certificates, such as all certificates for subordinate CAs. This search
works only for certificates containing the Netscape Certificate Type extension, which stores type
information. For each type, choose from the drop-down list to find certificates where that type is
On, Off, or Do Not Care.
4. To find a certificate with a specific subject name, use the Subject Name section. Select the check
box, then enter the subject name criteria. Enter values for the included search criteria and leave the
others blank.
The standard tags or components are as follows:
• Email address. Narrows the search by email address.
• Common name. Finds certificates associated with a specific person or server.
• UserID. Searches certificates by the user ID for the person to whom the certificate belongs.
• Organization unit. Narrows the search to a specific division, department, or unit within an organiz-
ation.
• Organization. Narrows the search by organization.
• Locality. Narrows the search by locality, such as the city.
• State. Narrows the search by state or province.
• Country. Narrows the search by country; use the two-letter country code, such as US.
5. After entering the field values for the server to match, specify the type of search to perform:
• Exact searches for certificate subject names match the exact components specified and contain
none of the components left blank. Wildcards cannot be used in this type of search.
Advanced Certificate Search
49