Understanding the Client Certificate Dashboard

This dashboard displays reports related to the certificates from the Client certificate inventory. You can also access this dashboard from the Client Certificate inventory page, by selecting Reports in the toggle at the top right corner of the page.

Report by Certificate Authority - Client

This report shows the count of certificates in the client inventory with respect to the certificate authorities and the expiry information.

Expiry Report by Month - Client

This report shows the count of certificates with respect to expiry month information.

Policy Compliance Report - Client

This report shows the count of client certificates as compliant or non-compliant based on the group policy assigned to the certificate.

Stale Certificate Report - Client

This report shows the count of client certificates that are either revoked or expired.

Certificate Summary Report - Client

This report shows the count of certificates with respect to their expiry status.

Count by Issuer - Client

This report shows the count of client certificates with respect to the issuer details.

Report by Certificate Authority

This report shows the count of certificates in the client inventory with respect to the certificate authorities and the expiry information.

Expiry Report by Month

This report shows the count of certificates with respect to expiry month information.

Policy compliance status

This report shows the count of client certificates as compliance or non-compliance based on the group policy assigned to the certificate.

Stale certificate report

This report shows the count of client certificates that are either revoked or expired.

Certificate Summary Report

This report shows the count of certificates with respect to their expiry status.

Count of issuer

This report shows the count of client certificates with respect to the issuer details.

Count by SID Report

This report shows the certificate count for certificates with and without an SID. A Security Identifier (SID) is a unique, immutable identifier assigned by Windows to each security principal.
The report uses a pie chart widget to show certificates with and without an SID.
The following certificates qualify as certificates with an SID:
  • Certificates with the SID present in other extensions
  • Certificates with the SID in the SAN (URI as well as other name) and having the following OIDs:
    • 1.3.6.1.4.1.311.25.2
    • 1.3.6.1.4.1.311.25.2.1

The (Export icon can be used to export the report as a .csv file.

To be redirected to the certificate inventory filtered for certificates with/without the SID, click the corresponding pie slice.

To hide the representation of certificates with/without an SID, click the corresponding legend. To unhide it, click the corresponding legend again.