Searching for Assets

You can use search tokens to search for asset information on Asset tab.

assetInterface.address

Use a text value ##### to specify the host IP address you’re interested in.

Example

Show assets with this IP address

assetInterface.address: 10.20.30.40

assetInterface.hostname

Use a text value ##### to specify the interface hostname you’re interested in.

Example

Show assets that have this hostname

assetInterface.hostname: xpsp2-jp-26-111

archiveReason

Use a text value ##### to list all assets with certificates that were archived for the specified reason.

Examples

Show assets with certificates that were archived with reason: Revoked

archiveReason: Revoked

certificate.approved

Use the values true | false to find certificates from approved CAs.

Example

Show assets with certificates that have approval status true from approved CAs

certificate.approved: true

certificate.certhash

Use a text value ##### to specify certificate fingerprint of the certificates you are looking for.

Example

Show certificates that have this hash value

certificate.certhash: 20e1541486f2cd405559d8483a3663f2a77c3cf93c72f4f915259f084f814221

certificate.dn

Use a text value ##### to list all certificates that have the specified subject identifier in the certificate subject distinguished name (DN).

Examples

Show certificates that have this subject identifier in the distinguished name.

certificate.dn: ST=California

certificate.expiryGroup

Use quotes or backticks within values to help you filter certificates according to expired time. Values can be:"Expired", "In 30 Days", "In 60 Days", "In 90 Days"

Examples

Show any findings which expired in last 30 days

certificate.expiryGroup: "In 30 Days"

certificate.instance.cipherSuites.value

Use a text value ##### to list the assets that have cipher suits enabled in a SSL/TLS instance.

Examples

Show assets that have this cipher suit enabled in the SSL/TLS instance

certificate.instance.cipherSuites.value: DES-CBC3-SHA

certificate.instance.fqdn

Use a text value ##### to specify host FQDN of the asset you’re interested in.

Example

Show assets that have this host FQDN

certificate.instance.fqdn: server1.qualys.com

certificate.instance.grade

Use a text value ##### to specify the Certificate Grade for an instance on the host you’re interested in.

Example

Show assets that have this Certificate Grade for an instance on the host

certificate.instance.grade: B

certificate.instance.port

Use an integer value ##### to specify the listening port you’re interested in.

Example

Show assets that have this listening port open

certificate.instance.port: 443

certificate.instance.service

Use a text value ##### to specify the service you’re interested in.

Example

Show assets that have this service

certificate.instance.service: SMTP

certificate.instance.sslProtocols

Use a value ##### to specify SSL/TLS protocols you’re interested in.

Example

Show assets that have this SSL/TLS protocol enabled

certificate.instance.sslProtocols: TLSv1.2

certificate.instance.vulns.qid

Use an integer value ##### to specify the vulnerability QID you’re interested in.

Example

Show assets that have this vulnerability QID

certificate.instance.vulns.qid: 38603

certificate.instance.vulns.severity

Use an integer value ##### to specify the vulnerability severity you’re interested in.

Example

Show assets that have this vulnerability severity

certificate.instance.vulns.severity: 3

certificate.instance.vulns.title

Use a text value ##### to specify vulnerability title you’re interested in.

Example

Show assets that have POODLE in the vulnerability title

certificate.instance.vulns.title: POODLE

certificate.issuer.country

Use a text value ##### to specify the country mentioned in the issuer distinguished name you’re interested in.

Example

Show assets with certificates that have this country in issuer DN

certificate.issuer.country: US

certificate.issuer.name

Use a text value ##### to specify name of the issuing certificate authority you're interested in.

Example

Show assets with certificates having this issuing authority name

certificate.issuer.name: Symantec Class 3 EV SSL CA - G3

certificate.issuer.organization

Use a text value ##### to specify the organization mentioned in the issuer distinguished name you’re interested in.

Example

Show assets with certificates that have this organization in issuer DN

certificate.issuer.organization: Symantec Corporation

certificate.issuer.organizationUnit

Use a text value ##### to specify the organization unit mentioned in the issuer distinguished name you’re interested in.

Example

Show assets with certificates that have this organization unit in issuer DN

certificate.issuer.organizationUnit: Symantec Trust Network

certificate.issuerCategory

Use the values Self-signed | CA to specify the category of certificate you’re interested in.

Example

Show assets with self-signed certificates

certificate.issuerCategory: Self-signed

certificate.keySize

Use a text value ##### to specify the key length of a certificate.

Example

Show assets with 2048-bit certificates

certificate.keySize: 2048

certificate.request.type

Use the values ENROLLMENT | RENEWAL to specify the type of your certificate request.

Example

Show all certificates requested for renewal

certificate.request.type: RENEWAL

certificate.request.cn

Use a text value ##### to specify the common name of the certificate you’re interested in.

Example

Show all certificates with common name certificate.qualys-demo.com

certificate.request.cn: certificate.qualys-demo.com

certificate.request.date

Use a date range or specific date to define when certificates were requested.

Examples

Show findings with certificates requested within certain dates

certificate.request.date: [2017-06-15 ... 2017-06-30]

Show findings with certificates requested starting 2017-06-22, ending 1 month ago

certificate.request.date: [2017-06-22 ... now-1M]

Show findings with certificates requested starting 2 weeks ago, ending 1 second ago

certificate.request.date: [now-2w ... now-1s]

Show findings with certificates requested on specific date

certificate.request.date:'2017-06-14'

certificate.request.status

Use quotes or backticks within values to help you find the certificate request status you're looking for. Status values can be: "SUBMITTED", "APPROVED", "REJECTED", "POSTED", "DENIED"

Examples

Show any findings with this status

certificate.request.status: SUBMITTED

Show any findings that match exact value

certificate.request.status: "SUBMITTED"

certificate.selfSigned

Use the values true | false to find assets with certificates that are self-signed.

Examples

Show assets with certificates that are self-signed

certificate.selfSigned: true

certificate.signatureAlgorithm

Use a text value ##### to specify the signing algorithm for a certificate.

Example

Show certificates that use this signature algorithm

certificate.signatureAlgorithm: SHA256withRSA

certificate.validFrom

Use a date range or specific date to define validation date of the certificates you are looking for.

Examples

Show certificates that are valid within certain dates

certificate.validFrom: [2018-06-15 ... 2018-06-30]

Show certificates that are valid on a specific date

certificate.validFrom:'2017-12-14'

certificate.validTo

Use a date range or specific date to define expiration date of the certificates you are looking for.

Examples

Show certificates that are expiring within certain dates

certificate.validTo: [2018-06-15 ... 2018-06-30]

Show certificates that are expiring on a specific date

certificate.validTo:'2017-12-14'

expiryGroup

Use quotes or backticks within values to help you filter certificates according to expired time. Values can be: "Expired", "In 30 Days", "In 60 Days", "In 90 Days"

Examples

Show any findings which expired in last 30 days

expiryGroup: "In 30 Days"

certificate.subject.country

Use a text value ##### to specify the country mentioned in the subject distinguished name you’re interested in.

Example

Show assets that have this country in subject DN

certificate.subject.country: US

certificate.subject.locality

Use a text value ##### to specify the locality mentioned in the subject distinguished name you’re interested in.

Example

Show assets that have this locality in subject DN

certificate.subject.locality: Redwood City

certificate.subject.name

Use a text value ##### to define the certificate name you're interested in.

Example

Show assets with certificates that have this name

certificate.subject.name: www.qualys.com

certificate.subject.organization

Use a text value ##### to specify the organization mentioned in the subject distinguished name you’re interested in.

Example

Show assets with certificates that have this organization in subject DN

certificate.subject.organization: Qualys, Inc.

certificate.subject.state

Use a text value ##### to specify the state mentioned in the subject distinguished name you’re interested in.

Example

Show assets with certificates that have this state in subject DN

certificate.subject.state: California

name

Use a text value ##### to specify the asset name you’re interested in.

Example

Show assets that have this asset name

name: server1

netbiosName

Use a text value ##### to specify the host NetBios name you’re interested in.

Example

Show assets that have this host NetBios name

netbiosName: server1

operatingSystem

Use quotes or backticks within values to help you find the operating system you're looking for.

Examples

Show any findings with this OS name

operatingSystem: Windows 2012

Show any findings that contain components of OS name

operatingSystem: "Windows 2012"

Show any findings that match exact value "Windows 2012"

operatingSystem: `Windows 2012`

certificate.subjectAlternativeNames.dnsName

Use a text value ##### show the DNS Name in Certificate Subject Alternate Name (SAN).

Examples

Show assets that have the specified DNS Name in Certificate SAN

certificate.subjectAlternativeNames.dnsName: www.qualys.com

certificate.subjectAlternativeNames.ipAddress

Use a text value ##### to show the IP address in Certificate Subject Alternate Name (SAN).

Examples

Show assets that have the specified the IP address in Certificate SAN

certificate.subjectAlternativeNames.ipAddress: 10.113.197.210

tags.name

Use a text value ##### to specify the asset tag you’re interested in.

Example

Show assets that have this asset tag

tags.name: prod-dmz