IssuedCertificateInfo

Record in Oadm.Sdk.Certificates · Oadm.Sdk.dll

One certificate the OADM CA issued for a device (SDK 0.4.0), as the list of issued certificates shows it.

public sealed record IssuedCertificateInfo

Properties

AuthorityId

string? AuthorityId { get; init; }

A CA row: the id of its CA (CertificateAuthorityInfo.Id); null for every other row.

AuthorityKind

CertificateAuthorityKind? AuthorityKind { get; init; }

A CA row: the kind of its CA (CertificateAuthorityKind); null for every other row.

CanIssue

bool CanIssue { get; init; }

A CA row: PKI holds the CA’s key, so its policies can pick it as the CA that issues; false for every other row.

Device

string Device { get; init; }

The device’s address as the device list shows it; empty for a device OADM no longer manages.

DeviceId

Guid DeviceId { get; init; }

The device it was issued for.

DeviceManaged

bool DeviceManaged { get; init; }

The device is still managed.

DeviceSerial

string DeviceSerial { get; init; }

The device’s serial (from its axis-<serial>.local name); empty when the certificate names none.

HasKey

bool HasKey { get; init; }

OADM holds its private key (created, imported with its key): it can be exported as PKCS#12.

Id

string? Id { get; init; }

The row’s id when it is no device certificate (“ca:…”, “local:…”, “server:…”); null = IssuedCertificateInfo.SerialNumber.

IsRootCa

bool IsRootCa { get; init; }

A CA row: a root CA (it issued itself); false for an intermediate CA and every other row.

IssuedBy

string? IssuedBy { get; init; }

The name of the CA that issued it (“OADM Root CA SERVER01”); null = IssuedCertificateInfo.Source.

IssuedUtc

DateTime IssuedUtc { get; init; }

When OADM issued it (or found it on the device, for certificates from before the list).

IssuerId

string? IssuerId { get; init; }

The id of the CA that issued it (CertificateIssuerChoice.Id, “other” for a CA PKI does not list); null when the server does not say.

KeyText

string? KeyText { get; init; }

The key, “RSA 4096”, “ECC P-256”; null when the server does not say (device certificates).

Kind

ListedCertificateKind Kind { get; init; }

What the row is.

Name

string? Name { get; init; }

The certificate’s name for rows that are no device certificate; null = the device.

NotAfterUtc

DateTime NotAfterUtc { get; init; }

End of validity.

NotBeforeUtc

DateTime NotBeforeUtc { get; init; }

Start of validity.

Purpose

string Purpose { get; init; }

One of DeviceCertificatePurposes.

Revocation

CertificateRevocation? Revocation { get; init; }

The revocation, when it is revoked.

SerialNumber

string SerialNumber { get; init; }

The serial number (CertificateSerials.Normalize).

Source

string Source { get; init; }

One of IssuedCertificateSources.

State

IssuedCertificateState State { get; init; }

Its state now.

Unreadable

bool Unreadable { get; init; }

A CA row whose stored CA cannot be read (damaged): it says so and offers only Delete; false for every other row.

UsedBy

string? UsedBy { get; init; }

What uses it: the device it is installed on, “802.1X server”, “EST server”; for a CA every policy and service; null = nothing.

UsedByBadges

IReadOnlyList<string>? UsedByBadges { get; init; }

The short form of IssuedCertificateInfo.UsedBy as badges: a CA’s groups (“802.1X”, “EST”, “Issuing”), a server certificate’s server; null: IssuedCertificateInfo.UsedBy is shown as text (a device).

UsedIn

IReadOnlyList<string>? UsedIn { get; init; }

A CA row: the names of the policies that use the CA (issuing, trusted, sign-in), in the policies’ order; null for none.