First operation mode: condition parameter expected_cert_identifiers is not
set. The condition checks if there is at least one valid certificate with
the specified search criteria.
Returns a success if at least one matching certificate was found.
Second operation mode:
If the parameter expected_cert_identifiers is set, its content is
deserialized. The resulting array is interpreted as a list certificate
identifiers. The remaining parameters are used for a database search just
as in the first operation mode.
The newest match (highest NotAfter date) is checked against the list of
expected_cert_identifiers. If the match is found in the list the condition
If the expected_cert_identifiers array is empty, the condition always
Side effect on success: figures out the newest matching certificate
and sets the workflow context parameter cert_identifier
to its certificate identifier.
Side effect on success: if export_notafter is set in the activity
definition, the found NotAfter date is exported to the workflow context
entry specified via export_notafter in YYYYMMDDHHMMSS format.
cert_profile: filter certificates with this profile
cert_email: filter certificates with specified email address
cert_subject: filter certificates with specified subject
min_remaining_validity: filter certificates with a minimum of the specified
number of days remaining before expiration
expected_cert_identifiers: presence enables second operation mode (see
above. interpreted as serialized array of
certificate identifiers to match against
export_notafter if defined, the notafter date of the certificate
is written to the specified context entry
Note: if parameters specified start with a $, the corresponding workflow
context parameter is referenced instead of the literal string.