Findings Data: TLS/SSL Certificates Chain Output – Bitsight Knowledge Base

A TLS/SSL Certificate finding can have multiple or zero certificate chain records. They can be connected with the temporary_finding_id field.

Schema

Field	Description
temporary_finding_id String [`temp_finding_guid`]	The temporary unique identifier for this finding.
dns_name String	A comma-separated list of domains associated with this certificate.
start_date String [`YYYY-MM-DD HH:MM:SS`]	The date when the certificate’s validity begins.
end_date String [`YYYY-MM-DD HH:MM:SS`]	The date when the certificate’s validity expires.
issuer_name String	The certificate authority (CA) that issued this certificate. See CA details.
key_algorithm String	The cryptographic algorithm used to generate the key.
key_length Integer	The length of the key used to sign this certificate. For RSA encryption, a key length of 2048 bits is recommended; for elliptic curve encryption, a key length of 224 is recommended.
serial_number String	The serial number of this certificate. This can be used for internal investigation, such as identifying the active certificate.
signature_algorithm String	The cryptographic algorithm used to sign this certificate.
subject_name String	Information about the host that the certificate applies to.