# Class CIM_X509Certificate
extends CIM_X509Infrastructure

CIM_X509Certificate describes Internet X509 Public Key Infrastructure (PKI) standard based certificates. The certificates are signed by a trusted Certificate Authority (CA) or by the owner of the certificate and issued to an authenticated entity (e.g., human user, service, etc.) called the Subject in the certificate. The public key in the certificate is cryptographically related to a private key that is held and kept private by the authenticated Subject. The certificate and its related private key can then be used for establishing trust relationships and securing communications with the Subject. Refer to the Internet X.509 PKI standard (RFC 3280) for more information.

### Table of Contents
Hierarchy
Direct Known Subclasses
Class Qualifiers
Class Properties
Class Methods

## Class Hierarchy

CIM_ManagedElement
|
+--CIM_Credential
|
+--CIM_SignedCredential
|
+--CIM_X509Infrastructure
|
+--CIM_X509Certificate

## Direct Known Subclasses

## Class Qualifiers

Name | Data Type | Value
--- | --- | ---
ClassConstraint | string | /* The constraints below aim to efficiently */ /* represent a singular OctetString. Each of the properties*/ /* is a single encoded stringthus only the first element */ /* needs to be populated. */ inv:self.PublicKey->size()<=1 and self.SerialNumber->size()<=1 and self.EncodedCertificate->size()<=1
Description | string | CIM_X509Certificate describes Internet X509 Public Key Infrastructure (PKI) standard based certificates. The certificates are signed by a trusted Certificate Authority (CA) or by the owner of the certificate and issued to an authenticated entity (e.g., human user, service, etc.) called the Subject in the certificate. The public key in the certificate is cryptographically related to a private key that is held and kept private by the authenticated Subject. The certificate and its related private key can then be used for establishing trust relationships and securing communications with the Subject. Refer to the Internet X.509 PKI standard (RFC 3280) for more information.
UMLPackagePath | string | CIM::User::PublicKey
Version | string | 2.29.0

## Class Properties

### Local Class Properties

Name | Data Type | Default Value | Qualifiers
--- | --- | --- | ---
Name | Data Type | Value
AltSubject | string |
Description | string | Alternate subject identifier for the Certificate.
MappingStrings | string | RFC3280.IETF|Section 4.2.1.7
IssuerUniqueID | string |
Description | string | String that identifies the issuer of the certificate.
MappingStrings | string | RFC3280.IETF|Section 4.1.2.8
IsValid | boolean |
Description | string | IsValid represents whether the certificate is currently valid. When the certificate is revoked or expired or put on hold or invalidated for any reason IsValid shall be set to FALSE.
PathLengthConstraint | uint16 |
Description | string | An X.509 certificate may contain an optional extension that identifies whether the subject of the certificate is a certificate authority (CA). If the subject is a CA, this property defines the number of certificates that may follow this certificate in a certification chain.
MappingStrings | string | RFC3280.IETF|Section 4.2.1.10
PublicKeyAlgorithm | uint16 |
Description | string | Public key algorithm.
MappingStrings | string | RFC3280.IETF|Section 4.1.2.7
ValueMap | string | 0, 2, 3, 4, 5..32767, 32768..65535
Values | string | Unknown, RSA, DSA, ECDSA, DMTF Reserved, Vendor Specified
PublicKeySize | uint16 |
Description | string | The length of the public key represented in the PublicKey property.
MappingStrings | string | RFC3280.IETF|Section 4.1.2.7
Subject | string |
Description | string | Distinguished name identifying the subject of the certificate.Subject shall contain information as required by section 4.1.2.6 of RFC 3280 and shall be formatted based on RFC 4514.
DN | boolean | true
MappingStrings | string | RFC3280.IETF|Section 4.1.2.6
SubjectUniqueID | string |
Description | string | Certificate's unique subject identifier.
MappingStrings | string | RFC3280.IETF|Section 4.1.2.8
TrustedRootCertificate | boolean |
Description | string | TRUE value represents that the certificate is a trusted root certificate.
EncodedCertificate | string[] |
Description | string | The full content of the certificate in binary form.Only the first element of the array property shall be populated.
MappingStrings | string | RFC3280.IETF|Section 4
OctetString | boolean | true
ExtendedKeyUsage | string[] |
Description | string | This extension indicates one or more purposes for which the certified public key may be used, in addition to or in place of the basic purposes indicated in the key usage extension.
MappingStrings | string | RFC3280.IETF|Section 4.2.1.13
ExtensionID | string[] |
ArrayType | string | Indexed
Description | string | Extension identifier array for additional attributes associated with the certificate. The corresponding array element in the IsCritical property denotes whether the extension is critical. The corresponding array element in the ExtensionValue property contains the value of the extension attribute.
MappingStrings | string | RFC3280.IETF|Section 4.1.2.9, RFC3280.IETF|Section 4.2
ModelCorrespondence | string | CIM_X509Certificate.IsCritical, CIM_X509Certificate.ExtensionValue
ExtensionValue | string[] |
ArrayType | string | Indexed
Description | string | Certificate extension attribute value array. The corresponding array element in the ExtensionID property contains the identifier of the certificate extension attribute. The corresponding array element in the IsCritical property denotes whether the extension is critical.
MappingStrings | string | RFC3280.IETF|Section 4.1.2.9, RFC3280.IETF|Section 4.2
ModelCorrespondence | string | CIM_X509Certificate.IsCritical, CIM_X509Certificate.ExtensionID
IsCritical | boolean[] |
ArrayType | string | Indexed
Description | string | TRUE value represents that the extension attribute is critical. The corresponding array element in the ExtensionID property contains the identifier of the extension attribute. The corresponding array element in the ExtensionValue property contains the value of the extension attribute.
MappingStrings | string | RFC3280.IETF|Section 4.1.2.9, RFC3280.IETF|Section 4.2
ModelCorrespondence | string | CIM_X509Certificate.ExtensionID, CIM_X509Certificate.ExtensionValue
KeyUsage | uint16[] |
Description | string | Key usage defines the purpose of the key. Key usage could include digital signing, key agreement, certificate signing, and more. The key usage is an extension to the X.509 specification.
MappingStrings | string | RFC3280.IETF|Section 4.2.1.3
ValueMap | string | 0, 2, 3, 4, 5, 6, 7, 8..32767, 32768..65535
Values | string | Unknown, Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement, Key Certificate Signature, DMTF Reserved, Vendor Specified
PublicKey | string[] |
Description | string | The DER-encoded raw public key that belongs to the subject the certificate vouches for.Only the first element of PublicKey array property shall be populated with DER encoded raw public key octet string.
MappingStrings | string | RFC3280.IETF|Section 4.1.2.7
OctetString | boolean | true
SerialNumber | string[] |
Description | string | Unique number that identifies this certificate.Only the first element of the array property shall be populated.
MappingStrings | string | RFC3280.IETF|Section 4.1.2.2
OctetString | boolean | true

### Inherited Properties

Name | Data Type | Class Origin
--- | --- | ---
Caption | string | CIM_ManagedElement
Description | string | CIM_ManagedElement
ElementName | string | CIM_ManagedElement
Expires | datetime | CIM_Credential
Generation | uint64 | CIM_ManagedElement
InstanceID | string | CIM_SignedCredential
Issued | datetime | CIM_Credential
IssuerName | string | CIM_X509Infrastructure
OtherSignatureAlgorithm | string | CIM_SignedCredential
SignatureAlgorithm | uint16 | CIM_SignedCredential
SignatureAlgorithmOID | string | CIM_SignedCredential
ValidFrom | datetime | CIM_Credential
Version | uint16 | CIM_X509Infrastructure
FingerprintDigestAlgorithms | uint16[] | CIM_X509Infrastructure
Fingerprints | string[] | CIM_X509Infrastructure
MD5Fingerprint | string[] | CIM_X509Infrastructure
SHA1Fingerprint | string[] | CIM_X509Infrastructure
Signature | uint8[] | CIM_SignedCredential
TBSCertificate | string[] | CIM_X509Infrastructure

## Class Methods