OID reference
1.3.6.1.4.1.272.4.26.33.3.1.5
This object specifies how the certificate is treated internally. Possible Values: true(1), -- do not check for certificate revocation -- lists for this CA (no meaning for non-CA -- certificates) false(2) -- check for certificate revocation -- lists for this CA (no meaning for non-CA -- certificates).
Identification
{1 3 6 1 4 1 272 4 26 33 3 1 5}
Definitions may combine these properties differently.
Numbers refer to source variants above. Each value is shown only for variants that define it. Notes below names come from selected MIB definitions.
| Value | Name and source notes | Source variants |
|---|---|---|
| 1 | true | 1, 2 |
| 2 | false | 1, 2 |
| 3 | auto | 2 |
| 4 | inherit inherit from superior ca in chain | 2 |
At least one MIB declaration places this object in a table row. A value belongs to a row instance; its suffix depends on the row's INDEX or AUGMENTS definition.
In BIANCA-BRICK-CERT-MIB, the row index certIndex is declared as INTEGER. A non-negative index value is encoded as one numeric subidentifier. An instance has the form .1.3.6.1.4.1.272.4.26.33.3.1.5.<certIndex>. Use an index value actually present on the device and permitted by its MIB. Other definitions can differ.
snmpwalk [connection options] DEVICE .1.3.6.1.4.1.272.4.26.33.3.1.5
Replace the placeholders with your connection and authentication options. Available permissions and device support can differ from the MIB.
Properties come from available MIB definitions. Actual device support and access can differ. See source records below for original files and qualifications.
Available source records contain 2 distinct definitions; some records may not include a definition.
certNoCrls OBJECT-TYPE
SYNTAX INTEGER {
true(1), -- do not check for certificate revocation
-- lists for this CA (no meaning for non-CA
-- certificates)
false(2) -- check for certificate revocation
-- lists for this CA
}
ACCESS read-write
STATUS mandatory
DESCRIPTION
"This object specifies how the certificate is treated internally.
Possible Values:
true(1), -- do not check for certificate revocation
-- lists for this CA (no meaning for non-CA
-- certificates)
false(2) -- check for certificate revocation
-- lists for this CA (no meaning for non-CA
-- certificates)."
::= { certEntry 5 }certNoCrls OBJECT-TYPE
SYNTAX INTEGER {
true(1), -- do not check for certificate revocation
-- lists for this CA (no meaning for non-CA
-- certificates)
false(2), -- check for certificate revocation
-- lists for this CA
auto(3), -- check for crls only if there is a
-- CRLDistributionPoint in the certificate
inherit(4) -- inherit from superior ca in chain
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object determines how CRL checking is performed
for this certificate.
Possible Values:
true(1), -- do not check for certificate revocation
-- lists for this CA (no meaning for non-CA
-- certificates)
false(2), -- check for certificate revocation
-- lists for this CA (no meaning for non-CA
-- certificates)
auto(3), -- check for crls only if there is a
-- CRLDistributionPoint in the certificate
inherit(4), -- inherit from superior ca in chain."
DEFVAL { auto }
::= { certEntry 5 }
Meaning
Identical descriptions are grouped. Different wording and device-specific notes are retained.
Description 1
This object specifies how the certificate is treated internally. Possible Values: true(1), -- do not check for certificate revocation -- lists for this CA (no meaning for non-CA -- certificates) false(2) -- check for certificate revocation -- lists for this CA (no meaning for non-CA -- certificates).
Description 2
This object determines how CRL checking is performed for this certificate. Possible Values: true(1), -- do not check for certificate revocation -- lists for this CA (no meaning for non-CA -- certificates) false(2), -- check for certificate revocation -- lists for this CA (no meaning for non-CA -- certificates) auto(3), -- check for crls only if there is a -- CRLDistributionPoint in the certificate inherit(4), -- inherit from superior ca in chain.
Multiple manufacturers; see the original MIB MIB copies (LibreNMS/Observium Community)
Evidence
Matching descriptions are grouped; open a group to compare definitions and supporting files.
Status in source: mandatory.
Names: certNoCrls
{
"smi_kind": "OBJECT-TYPE",
"definition": [
"certNoCrls",
"OBJECT-TYPE",
"SYNTAX",
"INTEGER",
"{",
"true",
"(",
"1",
")",
",",
"false",
"(",
"2",
")",
"}",
"ACCESS",
"read-write",
"STATUS",
"mandatory",
"DESCRIPTION",
"\"This object specifies how the certificate is treated internally. Possible Values: true(1), -- do not check for certificate revocation -- lists for this CA (no meaning for non-CA -- certificates) false(2) -- check for certificate revocation -- lists for this CA (no meaning for non-CA -- certificates).\"",
"::=",
"{",
"certEntry",
"5",
"}"
],
"syntax_tree": [
[
"SimpleSyntax",
"INTEGER",
[
"enumSpec",
[
[
"true",
1
],
[
"false",
2
]
]
]
],
null,
[
"MaxAccessPart",
"read-write"
],
[
"Status",
"mandatory"
],
[
"DESCRIPTION",
"This object specifies how the certificate is treated internally. Possible Values: true(1), -- do not check for certificate revocation -- lists for this CA (no meaning for non-CA -- certificates) false(2) -- check for certificate revocation -- lists for this CA (no meaning for non-CA -- certificates)."
],
null,
null,
null,
null
]
}Module: BIANCA-BRICK-CERT-MIB
See published definition above
{'RFC-1212': ['OBJECT-TYPE'], 'RFC1155-SMI': ['IpAddress', 'Counter', 'TimeTicks']}Module: BIANCA-BRICK-CERT-MIB
{'RFC-1212': ['OBJECT-TYPE'], 'RFC1155-SMI': ['IpAddress', 'Counter', 'TimeTicks']}Status in source: current.
Names: certNoCrls
{
"smi_kind": "OBJECT-TYPE",
"definition": [
"certNoCrls",
"OBJECT-TYPE",
"SYNTAX",
"INTEGER",
"{",
"true",
"(",
"1",
")",
",",
"false",
"(",
"2",
")",
",",
"auto",
"(",
"3",
")",
",",
"inherit",
"(",
"4",
")",
"}",
"MAX-ACCESS",
"read-write",
"STATUS",
"current",
"DESCRIPTION",
"\"This object determines how CRL checking is performed for this certificate. Possible Values: true(1), -- do not check for certificate revocation -- lists for this CA (no meaning for non-CA -- certificates) false(2), -- check for certificate revocation -- lists for this CA (no meaning for non-CA -- certificates) auto(3), -- check for crls only if there is a -- CRLDistributionPoint in the certificate inherit(4), -- inherit from superior ca in chain.\"",
"DEFVAL",
"{",
"auto",
"}",
"::=",
"{",
"certEntry",
"5",
"}"
],
"syntax_tree": [
[
"SimpleSyntax",
"INTEGER",
[
"enumSpec",
[
[
"true",
1
],
[
"false",
2
],
[
"auto",
3
],
[
"inherit",
4
]
]
]
],
null,
[
"MaxAccessPart",
"read-write"
],
[
"Status",
"current"
],
[
"DESCRIPTION",
"This object determines how CRL checking is performed for this certificate. Possible Values: true(1), -- do not check for certificate revocation -- lists for this CA (no meaning for non-CA -- certificates) false(2), -- check for certificate revocation -- lists for this CA (no meaning for non-CA -- certificates) auto(3), -- check for crls only if there is a -- CRLDistributionPoint in the certificate inherit(4), -- inherit from superior ca in chain."
],
null,
null,
null,
[
"DEFVAL",
"auto"
]
]
}Vendor MIB copy from the Observium Community archive.
Module: FEC-CERT-MIB
See published definition above
{'SNMPv2-TC': ['DisplayString', 'TestAndIncr', 'TimeStamp'], 'BINTEC-MIB': ['Date', 'HexValue', 'ipsec'], 'SNMPv2-SMI': ['MODULE-IDENTITY', 'OBJECT-TYPE', 'NOTIFICATION-TYPE', 'enterprises', 'snmpModules', 'mib-2'], 'SNMPv2-CONF': ['MODULE-COMPLIANCE', 'OBJECT-GROUP', 'NOTIFICATION-GROUP']}Related source files and packages:
Historical records
certNoCrls OBJECT-TYPE
SYNTAX INTEGER {
true(1),
false(2)
}
ACCESS read-write
STATUS mandatory
DESCRIPTION
"This object specifies how the certificate is treated internally.
Possible Values:
true(1),
false(2)
::= { certEntry 5 }
certNoCrls OBJECT-TYPE
SYNTAX INTEGER {
true(1),
false(2)
}
ACCESS read-write
STATUS mandatory
DESCRIPTION
"This object specifies how the certificate is treated internally.
Possible Values:
true(1),
false(2)
::= { certEntry 5 }
Registration
| OID | Name | Direct children | Descendants | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.272.4.26.33.3.1.1 | certIndex | 0 | 0 | A unique index of this certificate entry. |
| 1.3.6.1.4.1.272.4.26.33.3.1.2 | certDescription | 0 | 0 | This object specifies the name of the X.509 Certificate. |
| 1.3.6.1.4.1.272.4.26.33.3.1.3 | certIsCA | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.4 | certForceTrusted | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.6 | certSerialNumber | 0 | 0 | This object specifies the serial number of the certificate. |
| 1.3.6.1.4.1.272.4.26.33.3.1.7 | certSubjectName | 0 | 0 | The subject name of the certificate. |
| 1.3.6.1.4.1.272.4.26.33.3.1.8 | certSubjectAltNames | 0 | 0 | The subject alternative name of the certificate. For IPSec, this field (not the subject name) is taken by default as the peer id,… |
| 1.3.6.1.4.1.272.4.26.33.3.1.9 | certIssuerName | 0 | 0 | The name of the certificate authority which issued this certificate. |
| 1.3.6.1.4.1.272.4.26.33.3.1.10 | certIssuerAltNames | 0 | 0 | The alternative names of the certificate authority which issued this certificate. |
| 1.3.6.1.4.1.272.4.26.33.3.1.11 | certValidity | 0 | 0 | The validity period of this certificate in human readable form. |
| 1.3.6.1.4.1.272.4.26.33.3.1.12 | certPubKeyInfo | 0 | 0 | This string shows the properties of the public key certified in this certificate. These are the algorithm for which the key is us… |
| 1.3.6.1.4.1.272.4.26.33.3.1.13 | certKeyId | 0 | 0 | The key id as contained in the extensions of the certificate, if any. |
| 1.3.6.1.4.1.272.4.26.33.3.1.14 | certPrivateKey | 0 | 0 | The index of the private key from the ipsecPublicKeyTable corresponding to the public key in this certificate. Used only for own … |
| 1.3.6.1.4.1.272.4.26.33.3.1.15 | certValidNotBefore | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.16 | certValidNotAfter | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.17 | certKeyUsage | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.24 | certMD5Fingerprint | 0 | 0 | The fingerprint of the certificate computed as an MD5 hash of the DER encoded binary certificate data. |
| 1.3.6.1.4.1.272.4.26.33.3.1.25 | certSHA1Fingerprint | 0 | 0 | The fingerprint of the certificate computed as an SHA1 hash of the DER encoded binary certificate data. |
| 1.3.6.1.4.1.272.4.26.33.3.1.26 | certSource | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.27 | certUptodate | 0 | 0 |