certMgmtCaFingerprint
FEC-CERT-MIB ·
.0.33.7.1.21
Object
column
r/w
OctetString
This object holds the fingerprint of the CA certificate computed as an SHA1 or MD5 hash. This object is compared against an externally retrieved SHA1 / MD5 fingerprint (e.g. published on a CA's web site) to assure the authenticity of the certificate.
Context
- MIB
- FEC-CERT-MIB
- OID
.0.33.7.1.21- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- certMgmtEntry
- Table
- certMgmtTable
- Siblings
- 22
Syntax
OctetString
Values & Constraints
No enumerated values or constraints recorded.
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| certMgmtIndex A unique index for this entry. | column | Integer32 | .0.33.7.1.1 |
| certMgmtCaCertIndex The index of the CA certificate to use (from the certTable). | column | Integer32 | .0.33.7.1.10 |
| certMgmtCaDomain The domain for which the CA certificate is to be received
(getca_scep command only). | column | SNMPv2-TCDisplayString | .0.33.7.1.11 |
| certMgmtPassword The password (SCEP: challenge password, CMP: <ref-no>:<psk>. | column | SNMPv2-TCDisplayString | .0.33.7.1.12 |
| certMgmtAutoSave Determines if pending requests should be saved permanently
after each try and results should be saved permanently after
finish. | column | Enumeration | .0.33.7.1.13 |
| certMgmtPollInterval The interval (in seconds) between polls. | column | Integer32 | .0.33.7.1.14 |
| certMgmtMaxPolls The maximum number of polls performed. A value of -1 means
forever, a value of 0 disables polling, i.e. the task is
cancelled if the initial result is delayed. | column | Integer32 | .0.33.7.1.15 |
| certMgmtNumPolls The number of polls already performed. | column | Integer32 | .0.33.7.1.16 |
| certMgmtState The state of the task specified by this entry. | column | Enumeration | .0.33.7.1.17 |
| certMgmtRaSignCertIndex The index of the Registration Authority's (RA) certificate to
use for signing purposes (from the certTable). | column | Integer32 | .0.33.7.1.18 |
| certMgmtRaEncryptCertIndex The index of the Registration Authority's (RA) certificate to
use for encryption purposes (from the certTable). | column | Integer32 | .0.33.7.1.19 |
| certMgmtCommand The task to perform for this entry.
Possible values:
getca-scep(1), -- Retrieve CA certificate via SCEP
enroll-scep(2), -- Enroll using SCEP
enroll-manual(3), -- Do a manual en… | column | Enumeration | .0.33.7.1.2 |
| certMgmtKeyLength The key length in bits used in requests for certificate enrollment. | column | Integer32 | .0.33.7.1.20 |
| certMgmtNoCrls This object determines how CRL checking is set for
certificates retrieved during certificate enrollment.
Possible Values:
true(1), -- do not check for certificate revocation
… | column | Enumeration | .0.33.7.1.22 |
| certMgmtAction Flag whether certificate management task is waiting or
starts immediately.
Use this flag to create complex tasks in multiple steps:
First create task with certMgmtAction set to 'w… | column | Enumeration | .0.33.7.1.23 |
| certMgmtUrl The url to access for the task. | column | SNMPv2-TCDisplayString | .0.33.7.1.3 |
| certMgmtCertName The name of the resulting certificate (for certificate
retrieval tasks) or the name of the certificate to use
(for certificate export tasks. | column | SNMPv2-TCDisplayString | .0.33.7.1.4 |
| certMgmtSubjectName The subject name to include into the certificate request. | column | SNMPv2-TCDisplayString | .0.33.7.1.5 |
| certMgmtSubjectAltName The subject alternative name to include into the certificate
request (optional). | column | SNMPv2-TCDisplayString | .0.33.7.1.6 |
| certMgmtSubjectAltName2 A second subject alternative name (optional). | column | SNMPv2-TCDisplayString | .0.33.7.1.7 |
| certMgmtSubjectAltName3 A third subject alternative name (optional). | column | SNMPv2-TCDisplayString | .0.33.7.1.8 |
| certMgmtKeyIndex The index of the key in the ipsecPublicKeyTable to use for
certificate enrollment. | column | Integer32 | .0.33.7.1.9 |