# Certificates

SSL/TLS Certificates are a valuable source of information that are found on almost every web server on the internet. They can include information about your organization's network administrators, commonly used domain names (subject alternative names), and important dates for infrastructure updates. Certificates are commonly shared across many pieces of an attack surface, and you can select each individual certificate (which is uniquely identified by its fingerprint) to view all locations that certificate has been discovered.

Certificates are commonly found by completing a handshake with any servers identified to be using SSL/TLS and parsing the certificate that is received during that handshake.

EASM Certificates table
EASM Certificates table

# Accessing the Certificates page

To access the Certificates page, select or hover over EASM in the side navigation and then select Certificates.

EASM Certificates navigation
EASM Certificates navigation

# Filtering the Certificates page and viewing details

  1. Select the Filter icon Filter icon to narrow the Certificates table results.

  2. Select anywhere in a Certificates table row to display the Certificate details page in the right side slide out drawer in a condensed display.

    Certificate Details page

    The Certificate Details page includes the certificate's common name, the discovery chain, protocols/ports/ciphers, and details such as the issuer, etc.

# Create Policy

See the Policies section for details on creating alerts for this asset type.