curl_certificate

Inspect TLS certificates by connecting to input hostnames.

Platform support

Please be aware that some queries can only be run against certain platforms. Below is a list of the supported platforms that this query supports. Zercurity will automatically pause queries from running if errors are detected. Running a query against an unsupported platform will result in the following error: no such table: curl_certificate

  • Windows
  • Linux
  • Mac OSX
  • Free BSD

Table schema

Name Type Description
hostname TEXT Hostname (domain[:port]) to CURL
common_name TEXT Common name of company issued to
organization TEXT Organization issued to
organization_unit TEXT Organization unit issued to
serial_number TEXT Certificate serial number
issuer_common_name TEXT Issuer common name
issuer_organization TEXT Issuer organization
issuer_organization_unit TEXT Issuer organization unit
valid_from TEXT Period of validity start date
valid_to TEXT Period of validity end date
sha256_fingerprint TEXT SHA-256 fingerprint
sha1_fingerprint TEXT SHA1 fingerprint

Query examples

select * from curl_certificate where hostname = 'osquery.io'