Netscape MANAGEMENT SYSTEM 6.0 - CUSTOMIZATION Manual page 76

List Certificates Interface
Table 3-18 List Certificates queryCertFilter Parameters (Continued)
Parameter
certStatus
x509cert.certRevoInfo
x509cert.duration
76 Netscape Certificate Management System Customization Guide • March 2002
Expression Values
Value: * | EXPIRED | INVALID | REVOKED | VALID |
REVOKED_EXPIRED
This parameter matches the current status of a certificate. The asterisk (*)
matches any status.
Value: * | number between 0 and 6
This parameter matches the reason for revocation code on a certificate. The
revocation codes are:
• 0 - Reason not specified
• 1 - Key compromised
• 2 - CA key compromised
• 3 - Affiliation changes
• 4 - Certificate superseded
• 5 - Cessation of operation
• 6 - Certificate is on hold
To search for multiple values, construct a filter with multiple
x509cert.certRevoInfo parameters connected with a logical OR. Do
not connect these parameters with an AND, since a certificate cannot have
more than one revocation reason. For example, to match certificates
revoked due to key compromise or an unspecified reason:
(|(x509cert.certRevoInfo=0)(x509cert.certRevoInfo=1))
Value: number of milliseconds
This parameter matches the total number of milliseconds of a certificates
validity period. Typically a range is specified using filters with >= and <=
operators, rather than an exact match. The following list shows the number
of milliseconds in some typical time intervals:
• Day: 86,400,000
• Week: 604,800,000
• Month (30 Days): 2,592,000,000
• Year: 31,536,000,000