Certificates

Certificate Breakdown

Use these quick filters for a breakdown of your certificates. You'll see details for all certificates unless you've selected an asset group.

All

Find out how many certificates you have in total and how many of those are expired. You'll also see the number of hosts with and without certificates. Hosts without certificates includes 1) hosts that have not been scanned for certificates, and 2) hosts that have been scanned but certificates were not detected.

Expired

See how many certificates are currently expired and will be expiring in the next 10 days, 30 days, etc.

Self-Signed

See how many self-signed certificates were detected, and how many of them are invalid. A certificate is invalid when 1) the certificate is expired, or 2) the certificate source is not known.

Unique Key Size

See how many certificates you have at each key size.

Certificate Authority

See how many certificate authorities are in use and how many have issues, meaning the certificate authority has at least one invalid certificate. A certificate is invalid when 1) the certificate is expired, or 2) the certificate source is not known.

Select Asset Group

Select an asset group to only see certificates for the hosts in the asset group. Your selection affects the graphs at the top of the page and the certificates list.

Select Asset Tags

We'll only show you certificates for the hosts matching your tag selection. Your selection affects the graph at the top of the page and the certificates list.

Take actions on certificates

Your actions apply to all hosts with the certificate.

Ignore a certificate to hide it from your view.

Make an ignored certificate active again. You can show ignored certificates using the Filters menu.  

Delete a certificate from your inventory. If it's found by another scan, it will be added back.

Download the certificates list

Get a certificates report in one of these formats: CSV, ZIP, MHT, XML

Filter your list

Quickly filter the list to include: Ignored, Active, Hearbleed-All (all hosts affected by heartbleed including fixed) and Heartbleed-Active (hosts that are currently vulnerable).

Customize your view

Change columns, rows and sorting. For example, you can add the Certificate Fingerprint column and hide the Key Size column.