000023661 - Simple example queries and their results using Keon Certificate Authority reporting tool

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000023661
Applies ToKeon Certificate Authority 6.x
KCA Reporting Tool
IssueSimple example queries and their results using Keon Certificate Authority reporting tool
ResolutionHere are 4 simple configurations and their resulting outputs, to use a reference of what to expect normal results will  look like.

NOTE: The text in the examples reflecting the status of active, revoked, and suspended is from the name of the certificate; the certificates were created with names reflecting their future status for the purpose of illustrating the results in the examples. You will not see these status values as text in your report outputs.

EXAMPLE ONE ____ Displays every certificate ____

port 389

host heeney-pc

displayAttributes certDN,CN,OU,CA_MD5,notbefore_dte,notafter_dte,EMAIL,UID

RESULT OF EXAMPLE ONE ____

27 record(s) matching search criteria.
Search criteria is based on: (&(objectclass=xuda_certificate))
Report Generated on: Mon Jun 05 11:31:57 2006

"Record Number","certDN","CN","OU","CA_MD5","notbefore_dte","notafter_dte","EMAIL","UID"

"1","CN=RSA Security Secure Directory Server,OU=TS,O=RSA,C=US","RSA Security Secure Directory Server","TS","30a0b5f3764562db10a766780fcf3d71","20060512","20090511"," "," "
"2","CN=RSA Security Secure Directory Root Access,OU=TS,O=RSA,C=US","RSA Security Secure Directory Root Access","TS","30a0b5f3764562db10a766780fcf3d71","20060512","20090511"," "," "
"3","CN=RSA Security CMP Server,OU=TS,O=RSA,C=US","RSA Security CMP Server","TS","30a0b5f3764562db10a766780fcf3d71","20060512","20090511"," "," "
"4","CN=Heeney-pc CM Administrative Certificate,OU=TS,O=RSA,C=US","Heeney-pc CM Administrative Certificate","TS","112e924a700f99e520557ffa8a0633ae","20060512","20090508"," "," "
"5","CN=heeney-pc.NA.RSA.NET,OU=TS,O=RSA,C=US","heeney-pc.NA.RSA.NET","TS","30a0b5f3764562db10a766780fcf3d71","20060512","20090511"," "," "
"6","CN=heeney-pc.NA.RSA.NET,OU=TS,O=RSA,C=US","heeney-pc.NA.RSA.NET","TS","30a0b5f3764562db10a766780fcf3d71","20060512","20090511"," "," "
"7","CN=heeney-pc.NA.RSA.NET,OU=TS,O=RSA,C=US","heeney-pc.NA.RSA.NET","TS","30a0b5f3764562db10a766780fcf3d71","20060512","20090511"," "," "
"8","CN=heeney-pc.NA.RSA.NET,OU=TS,O=RSA,C=US","heeney-pc.NA.RSA.NET","TS","30a0b5f3764562db10a766780fcf3d71","20060512","20090511"," "," "
"9","CN=heeney-pc.NA.RSA.NET,OU=TS,O=RSA,C=US","heeney-pc.NA.RSA.NET","TS","30a0b5f3764562db10a766780fcf3d71","20060512","20090511"," "," "
"10","CN=heeney-pc.NA.RSA.NET,OU=TS,O=RSA,C=US","heeney-pc.NA.RSA.NET","TS","30a0b5f3764562db10a766780fcf3d71","20060512","20090511"," "," "
"11","CN=heeney-pc.NA.RSA.NET,OU=TS,O=RSA,C=US","heeney-pc.NA.RSA.NET","TS","22eda32290b8bc075dc436b2d4ffafda","20060512","20090511"," "," "
"12","CN=heeney-pc.NA.RSA.NET,OU=TS,O=RSA,C=US","heeney-pc.NA.RSA.NET","TS","30a0b5f3764562db10a766780fcf3d71","20060512","20090511"," "," "
"13","CN=heeney-pc.NA.RSA.NET,OU=TS,O=RSA,C=US","heeney-pc.NA.RSA.NET","TS","30a0b5f3764562db10a766780fcf3d71","20060512","20090511"," "," "
"14","CN=RSA Security Secure Log Server,O=RSA,OU=TS,C=US","RSA Security Secure Log Server","TS","30a0b5f3764562db10a766780fcf3d71","20060512","20090511"," "," "
"15","CN=RSA Security Secure Log Signing,O=RSA,OU=TS,C=US","RSA Security Secure Log Signing","TS","30a0b5f3764562db10a766780fcf3d71","20060512","20090511"," "," "
"16","CN=J1 test active one,OU=test,O=test,C=us","J1 test active one","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"17","CN=J1 test active two,OU=test,O=test,C=us","J1 test active two","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"18","CN=J1 test revoked one,OU=test,O=test,C=us","J1 test revoked one","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"19","CN=J1 test revoked two,OU=test,O=test,C=us","J1 test revoked two","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"20","CN=J1 Suspended Test one,OU=test,O=test,C=us","J1 Suspended Test one","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"21","CN=J1 Suspended Test two,OU=test,O=test,C=us","J1 Suspended Test two","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"22","CN=j2 active test one,OU=test,O=test,C=us","j2 active test one","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"23","CN=j2 active test two,OU=test,O=test,C=us","j2 active test two","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"24","CN=j2 revoked test two,OU=test,O=test,C=us","j2 revoked test two","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"25","CN=j2 revoked test one,OU=test,O=test,C=us","j2 revoked test one","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"26","CN=j2 suspended test one,OU=test,O=test,C=us","j2 suspended test one","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"27","CN=j2 suspended test two,OU=test,O=test,C=us","j2 suspended test two","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "

EXAMPLE TWO ____ Displays all certificates for a single CA ____

port 389

host heeney-pc

ca c7770ce0d96dd0c7f70a268917a3678b

displayAttributes certDN,CN,OU,CA_MD5,notbefore_dte,notafter_dte,EMAIL,UID

RESULT OF EXAMPLE TWO____

12 record(s) matching search criteria.
Search criteria is based on: (&(objectclass=xuda_certificate)(ca_md5=c7770ce0d96dd0c7f70a268917a3678b))
Report Generated on: Mon Jun 05 11:38:05 2006

"Record Number","certDN","CN","OU","CA_MD5","notbefore_dte","notafter_dte","EMAIL","UID"

"1","CN=J1 test active one,OU=test,O=test,C=us","J1 test active one","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"2","CN=J1 test active two,OU=test,O=test,C=us","J1 test active two","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"3","CN=J1 test revoked one,OU=test,O=test,C=us","J1 test revoked one","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"4","CN=J1 test revoked two,OU=test,O=test,C=us","J1 test revoked two","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"5","CN=J1 Suspended Test one,OU=test,O=test,C=us","J1 Suspended Test one","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"6","CN=J1 Suspended Test two,OU=test,O=test,C=us","J1 Suspended Test two","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"7","CN=j2 active test one,OU=test,O=test,C=us","j2 active test one","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"8","CN=j2 active test two,OU=test,O=test,C=us","j2 active test two","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"9","CN=j2 revoked test two,OU=test,O=test,C=us","j2 revoked test two","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"10","CN=j2 revoked test one,OU=test,O=test,C=us","j2 revoked test one","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"11","CN=j2 suspended test one,OU=test,O=test,C=us","j2 suspended test one","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"12","CN=j2 suspended test two,OU=test,O=test,C=us","j2 suspended test two","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "

EXAMPLE THREE ____ Displays all certificates for a single jurisdiction of a single CA ____

port 389

host heeney-pc

ca c7770ce0d96dd0c7f70a268917a3678b

jurisdiction 39800973ef0acde0a996717d5281db745bebb06e

displayAttributes certDN,CN,OU,CA_MD5,notbefore_dte,notafter_dte,EMAIL,UID

RESULT OF EXAMPLE THREE ____

6 record(s) matching search criteria.
Search criteria is based on: (&(objectclass=xuda_certificate)(ca_md5=c7770ce0d96dd0c7f70a268917a3678b)(domainID=39800973ef0acde0a996717d5281db745bebb06e))
Report Generated on: Mon Jun 05 11:46:51 2006

"Record Number","certDN","CN","OU","CA_MD5","notbefore_dte","notafter_dte","EMAIL","UID"

"1","CN=J1 test active one,OU=test,O=test,C=us","J1 test active one","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"2","CN=J1 test active two,OU=test,O=test,C=us","J1 test active two","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"3","CN=J1 test revoked one,OU=test,O=test,C=us","J1 test revoked one","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"4","CN=J1 test revoked two,OU=test,O=test,C=us","J1 test revoked two","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"5","CN=J1 Suspended Test one,OU=test,O=test,C=us","J1 Suspended Test one","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"6","CN=J1 Suspended Test two,OU=test,O=test,C=us","J1 Suspended Test two","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "

EXAMPLE FOUR ____ Displays every active certificate for a single jurisdiction of a single CA ____

port 389

host heeney-pc

ca c7770ce0d96dd0c7f70a268917a3678b

jurisdiction 39800973ef0acde0a996717d5281db745bebb06e

certStatus 1

displayAttributes certDN,CN,OU,CA_MD5,notbefore_dte,notafter_dte,EMAIL,UID

RESULT OF EXAMPLE FOUR ____

2 record(s) matching search criteria.
Search criteria is based on: (&(objectclass=xuda_certificate)(ca_md5=c7770ce0d96dd0c7f70a268917a3678b)(domainID=39800973ef0acde0a996717d5281db745bebb06e)(cert_status=1))
Report Generated on: Mon Jun 05 11:56:59 2006

"Record Number","certDN","CN","OU","CA_MD5","notbefore_dte","notafter_dte","EMAIL","UID"

"1","CN=J1 test active one,OU=test,O=test,C=us","J1 test active one","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
"2","CN=J1 test active two,OU=test,O=test,C=us","J1 test active two","test","c7770ce0d96dd0c7f70a268917a3678b","20060605","20090507"," "," "
Legacy Article IDa30810

Attachments

    Outcomes