Name | Data Type | Default Value | Qualifiers |
Name | Data Type | Value |
AltSubject | string | |
Description | string | Alternate subject identifier for the Certificate. |
MaxLen | uint32 | 256 |
BasicConstraints | uint16 | |
Description | string | An X.509 certificate may contain an optional extension that identifies whether the subject of the certificate is a certificate authority (CA). If the subject is a CA, this property defines the number of certificates that may follow this certificate in a certification chain. |
ExtendedKeyUsage | string | |
Description | string | This extension indicates one or more purposes for which the certified public key may be used, in addition to or in place of the basic purposes indicated in the key usage extension. |
InstanceID | string | |
Description | string | Within the scope of the instantiating Namespace, InstanceID opaquely and uniquely identifies an instance of this class. In order to ensure uniqueness within the NameSpace, the value of InstanceID SHOULD be constructed using the following 'preferred' algorithm:
<OrgID>:<LocalID>
Where <OrgID> and <LocalID> are separated by a colon ':', and where <OrgID> MUST include a copyrighted, trademarked or otherwise unique name that is owned by the business entity creating/defining the InstanceID, or is a registered ID that is assigned to the business entity by a recognized global authority. (This is similar to the <Schema Name>_<Class Name> structure of Schema class names.) In addition, to ensure uniqueness, <OrgID> MUST NOT contain a colon (':'). When using this algorithm, the first colon to appear in InstanceID MUST appear between <OrgID> and <LocalID>.
<LocalID> is chosen by the organizational entity and SHOULD not be re-used to identify different underlying (real-world) elements. If the above 'preferred' algorithm is not used, the defining entity MUST assure that the resultant InstanceID is not re-used across any InstanceIDs produced by this or other providers for this instance's NameSpace.
For DMTF defined instances, the 'preferred' algorithm MUST be used with the <OrgID> set to 'CIM'. |
Key | boolean | true |
IssuerName | string | |
Description | string | Issuer name of the certificate authority who signed the certificate. |
IssuerUID | string | |
Description | string | String that identifies the issuer of the certificate. |
IsValid | uint16 | |
Description | string | Whether the application considers the certificate to be valid. |
ValueMap | string | 0, 2, 3, 4..32767, 32768..65535 |
Values | string | Unknown, Valid, Invalid, DMTF Reserved, Vendor Specified |
KeyUsage | uint16 | |
Description | string | Key usage defines the purpose of the key. Key usage could include digital signing, key agreement, certificate signing, and more. The key usage is an extension to the X.509 specification. |
ValueMap | string | 0, 2, 3, 4, 5, 6, 7, 8..32767, 32768..65535 |
Values | string | Unknown, Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement, Key Certificate Signature, DMTF Reserved, Vendor Specified |
OtherPublicKeyEncoding | string | |
Description | string | A string that describes the encoding of PublicKey when PublicKeyEncoding is set to 1 ("Other"). This property must be set to null when PublicKeyEncoding is any value other than 1. |
ModelCorrespondence | string | CIM_SignedCredential.PublicKeyEncoding, CIM_SignedCredential.PublicKey |
PublicKeyAlgorithm | uint16 | |
Description | string | Public key algorithm like RSA or DSA. |
ValueMap | string | 0, 2, 3, 4..32767, 32768..65535 |
Values | string | Unknown, RSA, DSA, DMTF Reserved, Vendor Specified |
PublicKeyEncoding | uint16 | |
Description | string | An enumeration defining the encoding in PublicKey.
ASN.1 DER: encoded according to the Abstract Syntax Notation One (ASN.1) Distinguished Encoding Rules (DER), defined in the ITU-T X.680 series of standards.
SSH mpint: encoded according to the mpint format defined in IETF RFC4251 for representation of multiple-precision integers in SSH and other network protocols. |
ModelCorrespondence | string | CIM_SignedCredential.PublicKey, CIM_SignedCredential.OtherPublicKeyEncoding |
ValueMap | string | 0, 1, 2, 3, 4 |
Values | string | Unknown, Other, ASN.1 DER, SSH mpint, DMTF Reserved |
SerialNumber | uint16 | |
Description | string | Unique number that identifies this certificate. |
SignatureAlgorithmName | string | |
Description | string | Algorithm name used to generate the signature. |
SignatureAlgorithmOID | string | |
Description | string | Object ID of the signature algorithm. |
Subject | string | |
Description | string | Certificate subject identifier. |
MaxLen | uint32 | 256 |
SubjectUID | string | |
Description | string | String that identifies the applicant for the certificate. |
Version | string | |
Description | string | Version of X.509. |
EncodedCertificate | uint8[] | |
Description | string | The full content of the certificate in binary form. |
OctetString | boolean | true |
MD5Fingerprints | uint8[] | |
Description | string | Digital signature algorithm that verifies data integrity by creating a 128-bit message digest or fingerprint. The fingerprint is as unique to the input data. |
OctetString | boolean | true |
PublicKey | uint8[] | |
Description | string | The public key, encoded as indicated by PublicKeyEncoding. |
ModelCorrespondence | string | CIM_SignedCredential.OtherPublicKeyEncoding, CIM_SignedCredential.PublicKeyEncoding |
OctetString | boolean | true |
SHA1Fingerprints | uint8[] | |
Description | string | Secure hashing algorithm, a cryptographic message digest algorithm used to verify data integrity by making replication of the digest or fingerprint. |
OctetString | boolean | true |
Signature | uint8[] | |
Description | string | Certificate authority's identifying digest that confers validity on a certificate. |
OctetString | boolean | true |
SignatureAlgorithmParameters | string[] | |
Description | string | Algorithm parameters that are used to generate the signature that uses the TBS certificate as input. |
TBSCertificate | uint8[] | |
Description | string | Body of the actual certificate. It contains all the naming and the key information held in the certificate. The TBS certificate is used as an input data to the signature algorithm when the certificate is signed or verified. |
OctetString | boolean | true |