Certificate Inventory and Management terms
The Certificate Inventory Management glossary comprises a set of concise definitions and explanations for terms related to the tracking, storage, and management of digital certificates within an IT environment.
- Certificate Authority (CA)
- Entity that issues a digital certificate.
- Certificate Fingerprint
- Carries the unique information of the certificate, meta data.
- Discovery Method - CA (Version 1.1.7 Certificate Inventory and Management)
- TLS certificates belonging to this category of discovery method are discovered from a Certificate Authority such as GoDaddy or DigiCert.
- Discovery Method - Certificate Import (Version 1.1.7 Certificate Inventory and Management)
- TLS certificates belonging to this category of discovery method are discovered by importing the files into the system using pattern-based Discovery.
- Discovery Method - Port
- TLS certificates belonging to this category of discovery method are discovered from remote servers listening ports.
- Discovery Method - URL
- TLS certificates belonging to this category of discovery method are discovered from URLs.
- External Certificate
- Indicates that the digital certificate is signed by either root or intermediate CA.
- Internal certificate or self-signed
- Indicates that the digital certificate is signed by the same entity whose identity it certifies for example, internal or self-signed certificates are not signed by root or intermediate CAs.
- Transport Layer Security (TLS)
- Successor protocol to SSL. TLS is an improved version of SSL. It works in much the same way as the SSL, using encryption to protect the transfer of data and information.
- Trust manager
- Validates the TLS certificate.
- Trust store
- Repository to store CA certificates.
- Unique vs installed certificates
- Unique: Each unique instance or fingerprint of certificate.