Das Datenbankschema der Zertifizierungsstellen-Datenbank

Möchte man Abfragen gegen die Zertifizierungsstellen-Datenbank formulieren, muss man zuerst wissen, wonach man suchen möchte.

Es gibt die Möglichkeit, das Datenbankschema der Zertifizierungsstellen-Datenbank ausgeben zu lassen.

Das Datenbankschema kann man sich mit folgendem Kommandozeilenbefehl anzeigen lassen:

certutil -schema

Schema der Zertifikate-Tabelle

Die Inhalte der Subject Alternative Names sind nicht als Spalte in der Datenbanktabelle gespeichert. Sie können nur durch Interpretieren Inhaltes des binär gespeicherten Zertifikates ausgelesen werden.

SpalteAnzeige-NameDatentypMaximale LängeIndiziert
Request.RequestIDRequest IDLong4Ja
Request.RawRequestBinary RequestBinary65536
Request.RawArchivedKeyArchived KeyBinary65536
Request.KeyRecoveryHashesKey Recovery Agent HashesString8192
Request.RawOldCertificateOld CertificateBinary16384
Request.RequestAttributesRequest AttributesString32768
Request.RequestTypeRequest TypeLong4
Request.RequestFlagsRequest FlagsLong4
Request.StatusCodeRequest Status CodeLong4
Request.DispositionRequest DispositionLong4Ja
Request.DispositionMessageRequest Disposition MessageString8192
Request.SubmittedWhenRequest Submission DateDate8Ja
Request.ResolvedWhenRequest Resolution DateDate8Ja
Request.RevokedWhenRevocation DateDate8
Request.RevokedEffectiveWhenEffective Revocation DateDate8Ja
Request.RevokedReasonRevocation ReasonLong4
Request.RequesterNameRequester NameString2048Ja
Request.CallerNameCaller NameString2048Ja
Request.SignerPoliciesSigner PoliciesString8192
Request.SignerApplicationPoliciesSigner Application PoliciesString8192
Request.OfficerOfficerLong4
Request.DistinguishedNameRequest Distinguished NameString8192
Request.RawNameRequest Binary NameBinary4096
Request.CountryRequest Country/RegionString8192
Request.OrganizationRequest OrganizationString8192
Request.OrgUnitRequest Organization UnitString8192
Request.CommonNameRequest Common NameString8192
Request.LocalityRequest CityString8192
Request.StateRequest StateString8192
Request.TitleRequest TitleString8192
Request.GivenNameRequest First NameString8192
Request.InitialsRequest InitialsString8192
Request.SurNameRequest Last NameString8192
Request.DomainComponentRequest Domain ComponentString8192
Request.EMailRequest Email AddressString8192
Request.StreetAddressRequest Street AddressString8192
Request.UnstructuredNameRequest Unstructured NameString8192
Request.UnstructuredAddressRequest Unstructured AddressString8192
Request.DeviceSerialNumberRequest Device Serial NumberString8192
Request.AttestationChallengeAttestation ChallengeBinary4096
Request.EndorsementKeyHashEndorsement Key HashString144Ja
Request.EndorsementCertificateHashEndorsement Certificate HashString144Ja
RequestIDIssued Request IDLong4Ja
RawCertificateBinary CertificateBinary16384
CertificateHashCertificate HashString128Ja
CertificateTemplateCertificate TemplateString254Ja
EnrollmentFlagsTemplate Enrollment FlagsLong4
GeneralFlagsTemplate General FlagsLong4
PrivatekeyFlagsTemplate Private Key FlagsLong4
SerialNumberSerial NumberString128Ja
IssuerNameIDIssuer Name IDLong4
NotBeforeCertificate Effective DateDate8
NotAfterCertificate Expiration DateDate8Ja
SubjectKeyIdentifierIssued Subject Key IdentifierString128Ja
RawPublicKeyBinary Public KeyBinary4096
PublicKeyLengthPublic Key LengthLong4
PublicKeyAlgorithmPublic Key AlgorithmString254
RawPublicKeyAlgorithmParametersPublic Key Algorithm ParametersBinary4096
PublishExpiredCertInCRLPublish Expired Certificate in CRLLong4
UPNUser Principal NameString2048Ja
DistinguishedNameIssued Distinguished NameString8192
RawNameIssued Binary NameString4096
CountryIssued Country/RegionString8192
OrganizationIssued OrganizationString8192
OrgUnitIssued Organization UnitString8192
CommonNameIssued Common NameString8192Ja
LocalityIssued CityString8192
StateIssued StateString8192
TitleIssued TitleString8192
GivenNameIssued First NameString8192
InitialsIssued InitialsString8192
SurNameIssued Last NameString8192
DomainComponentIssued Domain ComponentString8192
EMailIssued Email AddressString8192
StreetAddressIssued Street AddressString8192
UnstructuredNameIssued Unstructured NameString8192
UnstructuredAddressIssued Unstructured AddressString8192
DeviceSerialNumberIssued Device Serial NumberString8192

Schema der Sperrlistentabelle

SpalteAnzeige-NameDatentypMaximale LängeIndiziert
CRLRowIdCRL Row IDLong4Ja
CRLNumberCRL NumberLong4Ja
CRLMinBaseCRL Minimum Base NumberLong4
CRLNameIdCRL Name IDLong4
CRLCountCRL CountLong4
CRLThisUpdateCRL This UpdateDate8
CRLNextUpdateCRL Next UpdateDate8Ja
CRLThisPublishCRL This PublishDate8
CRLNextPublishCRL Next PublishDate8Ja
CRLEffectiveCRL EffectiveDate8
CRLPropagationCompleteCRL Propagation CompleteDate8Ja
CRLLastPublishedCRL Last PublishedDate8Ja
CRLPublishAttemptsCRL Publish AttemptsLong4Ja
CRLPublishFlagsCRL Publish FlagsLong4
CRLPublishStatusCodeCRL Publish Status CodeLong4Ja
CRLPublishErrorCRL Publish Error InformationString8192
CRLRawCRLCRL Raw CRLBinary536870912

Weiterführende Links: