OID reference
1.3.6.1.4.1.272.4.26.33.3.1.17
This object shows the key usage flags contained in the extensions of the certificate, if any. The flags are: EncipherOnly 0x00000001 CrlSign 0x00000002 KeyCertSign 0x00000004 KeyAgreement 0x00000008 DataEncipherment 0x00000010 KeyEncipherment 0x00000020 NonRepudiation 0x00000040 DigitalSignature 0x00000080 DecipherOnl…
Identification
{1 3 6 1 4 1 272 4 26 33 3 1 17}
Properties come from available MIB definitions. Actual device support and access can differ. See source records below for original files and qualifications.
The displayed source records contain one distinct definition. Compare its source records.
certKeyUsage OBJECT-TYPE
SYNTAX HexValue
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"This object shows the key usage flags contained
in the extensions of the certificate, if any.
The flags are:
EncipherOnly 0x00000001
CrlSign 0x00000002
KeyCertSign 0x00000004
KeyAgreement 0x00000008
DataEncipherment 0x00000010
KeyEncipherment 0x00000020
NonRepudiation 0x00000040
DigitalSignature 0x00000080
DecipherOnly 0x00010000"
::= { certEntry 17 }
Meaning
Identical descriptions are grouped. Different wording and device-specific notes are retained.
This object shows the key usage flags contained in the extensions of the certificate, if any. The flags are: EncipherOnly 0x00000001 CrlSign 0x00000002 KeyCertSign 0x00000004 KeyAgreement 0x00000008 DataEncipherment 0x00000010 KeyEncipherment 0x00000020 NonRepudiation 0x00000040 DigitalSignature 0x00000080 DecipherOnly 0x00010000
Multiple manufacturers; see the original MIB MIB copies (LibreNMS/Observium Community)
Evidence
Matching descriptions are grouped; open a group to compare definitions and supporting files.
Status in source: current.
Names: certKeyUsage
{
"smi_kind": "OBJECT-TYPE",
"definition": [
"certKeyUsage",
"OBJECT-TYPE",
"SYNTAX",
"HexValue",
"MAX-ACCESS",
"read-only",
"STATUS",
"current",
"DESCRIPTION",
"\"This object shows the key usage flags contained in the extensions of the certificate, if any. The flags are: EncipherOnly 0x00000001 CrlSign 0x00000002 KeyCertSign 0x00000004 KeyAgreement 0x00000008 DataEncipherment 0x00000010 KeyEncipherment 0x00000020 NonRepudiation 0x00000040 DigitalSignature 0x00000080 DecipherOnly 0x00010000\"",
"::=",
"{",
"certEntry",
"17",
"}"
],
"syntax_tree": [
[
"row",
"HexValue"
],
null,
[
"MaxAccessPart",
"read-only"
],
[
"Status",
"current"
],
[
"DESCRIPTION",
"This object shows the key usage flags contained in the extensions of the certificate, if any. The flags are: EncipherOnly 0x00000001 CrlSign 0x00000002 KeyCertSign 0x00000004 KeyAgreement 0x00000008 DataEncipherment 0x00000010 KeyEncipherment 0x00000020 NonRepudiation 0x00000040 DigitalSignature 0x00000080 DecipherOnly 0x00010000"
],
null,
null,
null,
null
]
}Vendor MIB copy from the Observium Community archive.
Module: FEC-CERT-MIB
See published definition above
{'SNMPv2-TC': ['DisplayString', 'TestAndIncr', 'TimeStamp'], 'BINTEC-MIB': ['Date', 'HexValue', 'ipsec'], 'SNMPv2-SMI': ['MODULE-IDENTITY', 'OBJECT-TYPE', 'NOTIFICATION-TYPE', 'enterprises', 'snmpModules', 'mib-2'], 'SNMPv2-CONF': ['MODULE-COMPLIANCE', 'OBJECT-GROUP', 'NOTIFICATION-GROUP']}Related source files and packages:
Registration
| OID | Name | Direct children | Descendants | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.272.4.26.33.3.1.1 | certIndex | 0 | 0 | A unique index of this certificate entry. |
| 1.3.6.1.4.1.272.4.26.33.3.1.2 | certDescription | 0 | 0 | This object specifies the name of the X.509 Certificate. |
| 1.3.6.1.4.1.272.4.26.33.3.1.3 | certIsCA | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.4 | certForceTrusted | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.5 | certNoCrls | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.6 | certSerialNumber | 0 | 0 | This object specifies the serial number of the certificate. |
| 1.3.6.1.4.1.272.4.26.33.3.1.7 | certSubjectName | 0 | 0 | The subject name of the certificate. |
| 1.3.6.1.4.1.272.4.26.33.3.1.8 | certSubjectAltNames | 0 | 0 | The subject alternative name of the certificate. For IPSec, this field (not the subject name) is taken by default as the peer id,… |
| 1.3.6.1.4.1.272.4.26.33.3.1.9 | certIssuerName | 0 | 0 | The name of the certificate authority which issued this certificate. |
| 1.3.6.1.4.1.272.4.26.33.3.1.10 | certIssuerAltNames | 0 | 0 | The alternative names of the certificate authority which issued this certificate. |
| 1.3.6.1.4.1.272.4.26.33.3.1.11 | certValidity | 0 | 0 | The validity period of this certificate in human readable form. |
| 1.3.6.1.4.1.272.4.26.33.3.1.12 | certPubKeyInfo | 0 | 0 | This string shows the properties of the public key certified in this certificate. These are the algorithm for which the key is us… |
| 1.3.6.1.4.1.272.4.26.33.3.1.13 | certKeyId | 0 | 0 | The key id as contained in the extensions of the certificate, if any. |
| 1.3.6.1.4.1.272.4.26.33.3.1.14 | certPrivateKey | 0 | 0 | The index of the private key from the ipsecPublicKeyTable corresponding to the public key in this certificate. Used only for own … |
| 1.3.6.1.4.1.272.4.26.33.3.1.15 | certValidNotBefore | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.16 | certValidNotAfter | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.24 | certMD5Fingerprint | 0 | 0 | The fingerprint of the certificate computed as an MD5 hash of the DER encoded binary certificate data. |
| 1.3.6.1.4.1.272.4.26.33.3.1.25 | certSHA1Fingerprint | 0 | 0 | The fingerprint of the certificate computed as an SHA1 hash of the DER encoded binary certificate data. |
| 1.3.6.1.4.1.272.4.26.33.3.1.26 | certSource | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.27 | certUptodate | 0 | 0 |