API Reference
CertificateInventoryQuery
Query options for searching persisted certificate inventory snapshots.
Inheritance
- Object
- CertificateInventoryQuery
Usage
This type appears in these public API surfaces even when no hand-authored example is attached directly to the page.
Accepted by parameters
Constructors
public CertificateInventoryQuery() #Inherited Methods
public override Boolean Equals(Object obj) #BooleanParameters
- obj Object
Properties
public Nullable<DateTimeOffset> SinceUtc { get; set; } #Only include snapshots captured on or after this UTC timestamp.
public Nullable<DateTimeOffset> UntilUtc { get; set; } #Only include snapshots captured on or before this UTC timestamp.
public String HostContains { get; set; } #Case-insensitive host substring filter.
public String SubjectContains { get; set; } #Case-insensitive certificate subject substring filter.
public String SanContains { get; set; } #Case-insensitive SAN substring filter.
public String ServiceEquals { get; set; } #Case-insensitive service name exact-match filter.
public String IssuerContains { get; set; } #Case-insensitive issuer substring filter.
public String AuthorityFamilyEquals { get; set; } #Case-insensitive CA family exact-match filter for the leaf issuer.
public String RootContains { get; set; } #Case-insensitive root issuer/subject substring filter.
public String RootAuthorityFamilyEquals { get; set; } #Case-insensitive CA family exact-match filter for the root issuer.
public String CtSourceContains { get; set; } #Case-insensitive CT source substring filter (matches any configured discovery source).
public String CtTemplateErrorContains { get; set; } #Case-insensitive CT template-error substring filter (matches any captured template/configuration error).
public String ChainSourceContains { get; set; } #Case-insensitive chain source substring filter (matches the latest or historical chain source).
public String ThumbprintEquals { get; set; } #Leaf certificate thumbprint exact-match filter.
public String RootThumbprintEquals { get; set; } #Root certificate thumbprint exact-match filter.
public String SerialNumberEquals { get; set; } #Leaf certificate serial-number exact-match filter.
public Nullable<Boolean> KnownAuthorityOnly { get; set; } #When set, include only entries whose recognized-authority state equals this value.
public Nullable<Boolean> KnownRootAuthorityOnly { get; set; } #When set, include only entries whose recognized-root-authority state equals this value.
public Nullable<Boolean> ValidOnly { get; set; } #When set, include only entries whose certificate validity equals this value.
public Nullable<Boolean> ExpiredOnly { get; set; } #When set, include only entries whose expiry state equals this value.
public Nullable<Boolean> ChainCompleteOnly { get; set; } #When set, include only entries whose chain completeness equals this value.
public Nullable<Boolean> HostnameMatchOnly { get; set; } #When set, include only entries whose hostname match state equals this value.
public Nullable<Boolean> SelfSignedOnly { get; set; } #When set, include only entries whose self-signed state equals this value.
public Nullable<Boolean> ReachableOnly { get; set; } #When set, include only entries whose reachability equals this value.
public Nullable<Boolean> PresentInCtOnly { get; set; } #When set, include only entries whose CT presence equals this value.
public Nullable<Boolean> AllowsServerAuthOnly { get; set; } #When set, include only entries whose server-auth EKU state equals this value.
public Nullable<Boolean> AllowsClientAuthOnly { get; set; } #When set, include only entries whose client-auth EKU state equals this value.
public Nullable<Boolean> AllowsSecureEmailOnly { get; set; } #When set, include only entries whose secure-email EKU state equals this value.
public Nullable<Boolean> WeakKeyOnly { get; set; } #When set, include only entries whose weak-key state equals this value.
public Nullable<Boolean> Sha1SignatureOnly { get; set; } #When set, include only entries whose SHA-1 signature state equals this value.
public Nullable<Boolean> NotYetValidOnly { get; set; } #When set, include only entries whose not-yet-valid state equals this value (NotBeforeUtc is in the future). Entries with no NotBeforeUtc value are treated as already valid.
public String AuthenticationProfileEquals { get; set; } #Case-insensitive authentication profile exact-match filter.
public Nullable<Int32> ExpiringWithinDays { get; set; } #Only include certificates expiring within this many days (future dates only).
public Boolean LatestPerEndpointOnly { get; set; } #When true, only evaluate the latest observed entry per endpoint (host+port) within the selected snapshot window. Older observations for that same endpoint are skipped even if they would otherwise match filters.
public Int32 MaxResults { get; set; } #Maximum number of entries returned in Entries.