Activity parameters

near_expiry

Parseable OpenXPKI::Datetime value (autodetected), certificates expiring before the given date are shown as "near_expiry". Default is +000030 (30 days).

recent_expiry

Parseable OpenXPKI::Datetime value (autodetected), certificates which are expired after the given date are shown as "recent_expiry". Default is -000030 (30 days in the past).

recent_renewal

Parseable OpenXPKI::Datetime value (autodetected), certificates which have been issued as renewal to a predecessor certificate after the given date are shown as "recent_renewal". Default is -000030 (30 days in the past).

valid_at

Parseable OpenXPKI::Datetime value (autodetected) used as based for all date related calculations. Default is now.

target_key

If set, the result is written into this single context value as a hash using the keys named below as keys in the hash.

cutoff_notbefore (not implemented yet)

Parseable OpenXPKI::Datetime value (autodetected), hide certificates where notbefore is below given date.

cutoff_notafter (not implemented yet)

Parseable OpenXPKI::Datetime value (autodetected), hide certificates where notafter is above given date.

Result

After completion the following parameters will be set in the context or as key/value pairs of the hash written to target_key.

total_count

Total number of certificates.

total_revoked

Number of certificates in revoked status (includes CRL pending).

total_expired

Number of expired certificates (without revoked)

total_distinct

Number of distinct subjects (includes revoked)

valid_count

Number of valid certificates (in validity window and not revoked)

valid_distinct

Number of distinct subjects within valid certificates

valid_revoked

Number of certificates that are in validity window but revoked.

near_expiry

Number of valid (not revoked) certificates that will expiry within the given window.

recent_expiry

Number of valid (not revoked) certificates that have been expired within the given window.

recent_renewed

Number of certificates that have been issued within the given window as a renewal to a predecessor certificate.

by_profile

Contains the share of certificate profiles of all valid certificates as a key/value map. The key is the internal name of the profile and the value is the absolute number of valid, issued certificates using this profile.