Netscape MANAGEMENT SYSTEM 6.0 - CUSTOMIZATION Manual page 77

Table 3-18 List Certificates queryCertFilter Parameters (Continued)
Parameter
x509cert.notAfter
x509cert.notBefore
x509cert.nsExtension.
<X>
Expression Values
Value: date (number of seconds since Jan 1, 1970)
A date object can be created using the JavaScript Date() constructor.
This parameter matches the date when a certificate expires. See
certCreateTime for an example of creating a date value in JavaScript
Value: date (number of seconds since Jan 1, 1970)
A date object can be created using the JavaScript Date() constructor.
This parameter matches the date when a certificate became valid. See
certCreateTime for an example of creating a date value in JavaScript
Value: on | off
This parameter matches the bit in the ns-cert-type extension specified by
the extension <X>.
Substitute an extension identifier for <X>:
• SecureEmail - for S/MIME certificates
• SSLClient - for SSL client certificates
• SSLServer - for SSL server certificates
• SubordinateEmailCA - for certificates with the S/MIME CA bit set
• SubordinateSSLCA - for certificates with the SSL CA bit set
For example, to match only certificates with the SSL client bit (bit 0) set in
the ns-cert-type extension:
(x509cert.nsExtension.SSLClient=on)
List Certificates Interface
Chapter 3 End-Entity Interface Reference 77