Table: ibm_certificate_manager_certificate - Query IBM Certificate Manager Certificates using SQL

IBM Certificate Manager is a cloud service that lets you plan, manage, and deploy digital certificates to enable secure transactions and privacy over the internet. It helps you automate, enforce, and audit certificate lifecycle processes to prevent outages and meet audit and compliance requirements. IBM Certificate Manager provides a secure repository for storing and managing the keys and certificates that are used in cryptographic processes.

Table Usage Guide

The ibm_certificate_manager_certificate table provides insights into the certificates within IBM Certificate Manager. As a Security Engineer, explore certificate-specific details through this table, including certificate status, expiration date, and associated metadata. Utilize it to manage and maintain the certificates, such as those nearing expiration, and to ensure the security of your applications.

Examples

Basic info

Analyze the status of various certificates to understand their validity and issuing authority. This could be useful in managing and maintaining the security and integrity of your system.

select
  name,
  id,
  status,
  issuer
from
  ibm_certificate_manager_certificate;

select
  name,
  id,
  status,
  issuer
from
  ibm_certificate_manager_certificate;

List all imported certificates

Discover the segments that have imported certificates to understand their status and issuer. This can help in maintaining the security and integrity of your system.

select
  name,
  id,
  status,
  issuer,
  imported
from
  ibm_certificate_manager_certificate
where
  imported;

select
  name,
  id,
  status,
  issuer,
  imported
from
  ibm_certificate_manager_certificate
where
  imported = 1;

Control examples

CIS v1.0.0 > 10 IBM Cloud Certificate Manager > 10.1 Ensure certificates generated through IBM Cloud Certificate Manager are automatically renewed before expiration

Schema for ibm_certificate_manager_certificate

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form.
account_id	text	=, !=, ~~, ~~, !~~, !~~	The ID fof the account.
akas	jsonb		Array of globally unique identifier strings (also known as) for the resource.
algorithm	text		The Algorithm of a certificate.
auto_renew_enabled	boolean		The automatic renewal status of the certificate.
begins_on	timestamp with time zone		The creation date of the certificate.
certificate_manager_instance_id	text	=	The CRN of the certificate manager service instance.
description	text		The description of the certificate.
domains	jsonb		An array of valid domains for the issued certificate. The first domain is the primary domain, extra domains are secondary domains.
expires_on	timestamp with time zone		The expiration date of the certificate.
has_previous	boolean		Indicates whether a certificate has a previous version.
id	text		The ID of the certificate that is managed in certificate manager.
imported	boolean		Indicates whether a certificate has imported or not.
issuance_info	jsonb		The issuance information of a certificate.
issuer	text		The issuer of the certificate.
key_algorithm	text		An alphanumeric value identifying the account ID.
name	text		The display name of the certificate.
order_policy_name	text		The order policy name of the certificate.
region	text		The region of this certificate.
rotate_keys	boolean		Rotate keys.
serial_number	text		The serial number of a certificate.
sp_connection_name	text	=, !=, ~~, ~~, !~~, !~~	Steampipe connection name.
sp_ctx	jsonb		Steampipe context in JSON form.
status	text		The status of a certificate.
title	text		Title of the resource.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- ibm

You can pass the configuration to the command with the --config argument:

steampipe_export_ibm --config '<your_config>' ibm_certificate_manager_certificate