How to know self-signed certificates in SSL extension?

[lovleen]

We have configured SSL extension but wondering how can SSL extension data help us identify self-signed certificates, we have enabled UA options also.
Another thing the DQL in Infra and Operations app needs to be fixed.

[p_devulapalli · Accepted solution]

@lovleen There is no direct indicator to say if a certificate is self signed or issued by a trusted certificate authority. One way to identify is by looking at Issuer and Subject from the certificate metadata collected . You can try the below DQL to get the details . 

fetch `dt.entity.python:certificate_monitor_certificate` 
| fieldsAdd entity.name, entity.type, common_name, host_port, cert_lifecycle, certificate_stage, issuer_common_name, issuer_org_name, port, subject_common_name, subject_org_name, validity_not_after, validity_not_before, source

[lovleen]

Thanks @p_devulapalli