5.5. Tracing Issued Certificate to CSR, and CSR to Issued Certificate
This section details how a CA agent can trace an issued certificate to the original submitted CSR, and from a CSR to an issued certificate.
If a certificate request has been approved successfully, a CA agent can do the following to search for the request and see the CSR matching the certificate:
- Access the
https://host_name:port/ca/agent/ca
. - Click Search for Requests
- Select and fill in Request ID Range (for example
12
for Lowest Request ID and12
for Highest Request ID. - Select Request Type and choose enrollment type.
- Select Request Status and choose completed status
- Make sure everything else is unselected.
- Click.
- Click on the request number. You see the certificate in clear text at this point.
- To display the CSR and certificate linking, right-click and select This Frame and View Frame Source.
- Search for
inputList.inputName="Certificate Request";
. The request is theinputList.inputVal
below that. - Search for
outputList.outputSyntax="pretty_print";
. The certificate is theoutputList.outputVal
below that.
To search from certificate to CSR:
- Access the
https://host_name:port/ca/agent/ca
. - Click Find.
- Click Details.
- You see the certificate in clear text, along with a Request ID link. Click on the link to open the Request page.
- To display the certificate and CSR linking:
- Search for
inputList.inputName="Certificate Request";
. The request is theinputList.inputVal
below that. - Search for
outputList.outputSyntax="pretty_print";
. The certificate is theoutputList.outputVal
below that.