Go to the Certificate Manager Agent Services page (see Accessing Agent Services). You must submit the proper client certificate to get access to this page.
Click Search for Certificates to display the Search for Certificates form in which you specify search criteria.
To search by particular criteria, use one or more of the sections of the Search for Certificates form.
The form is quite long; scroll down to see the different sections. To use a
section, select the appropriate checkbox, then fill in any necessary
information.
Serial Number Range. Use this section to find a certificate with a specific
serial number or to list all certificates within a range of serial numbers.
Status. Use this section to select certificates by their status. A certificate can
have one of the following status codes:
Subject Name. Use this section to list certificates with a particular owner.
For more information on filling in this section, see Step 4.
Revocation Information. Use this section to list certificates that have been
revoked during a particular period or by a particular agent. For example,
you can list all certificates revoked between July 1996 and January 1997, or
all certificates revoked by the agent with the user name admin.
Issuing Information. Use this section to list certificates that have been
issued during a particular period or by a particular agent. For example, you
can list all certificates issued between July 1996 and January 1997, or all
certificates issued by the agent with the user name betatest.
Dates of Validity. Use this section to list certificates that become effective
or expire during a particular period. For example, you can list all certificates
that became valid on June 1, 1996, or that expired between January 1, 1997
and June 1, 1997.
You can also list certificates that have a validity period of a certain length of
time. For example, you can list all certificates that are valid for less than one
month.
-
To list certificates that become effective or expire within a time period, select the day, month, and year from the drop-down lists to identify the beginning and end of the period.
-
To list certificates that have a validity period of a certain length in time, select "not greater than" or "not less than" from the drop-down list, enter a number, and select a time unit from the drop-down list: Days, Weeks, Months, or Years.
Type. Use this section to list certain types of certificates. For example, you
can list all certificates for subordinate CAs. Note that this search works only
for certificates containing the netscape-cert-type extension, which
stores type information.
To find a certificate with a specific subject name, use the Subject Name section.
The standard tags or components are as follows:
Email address. To narrow the search by email address, enter the email
address in this field.
Common name. To find certificates associated with a specific person or
server, enter the name in this field.
UserID. The UserID for the person whose certificate you want to find. For
example, at many companies the UserID is the name used to log in to the
network when starting up a computer.
Organization unit. To narrow the search to a specific division,
department, or unit within an organization, enter the name of the unit in
this field.
Organization. To narrow the search by organization, enter the name of the
business, university, or organization in this field.
Locality. To narrow the search by locality, enter the name of the local area
(for example, the name of the city) in this field.
State. To narrow the search by state or province, enter the name of the state
or province in this field.
Country (two-letter code). To narrow the search by country, enter the two-
letter code for the country (for example, US) in this field.
When you have entered the field values for the server to match, specify the
type of search that you want performed:
You can specify wildcard patterns in this type of search by using the
question mark character (?) to match an arbitrary single character and
the asterisk character (*) to match an arbitrary string of zero or more
characters.
Note that placing a single asterisk in a given field in the search form
specifies that the corresponding component must be in the certificate's
subject name but may have any value whatsoever. To indicate that you
do not care if the component is present, leave the field blank.
After entering your search criteria, scroll to the bottom of the form and enter the number of certificates matching your specified criteria that you want to see.
For a number n, the first n matching certificates are initially displayed.
Click Find.
Previous
