definition.json

{
  "requiredOneOf": [
    "x509-fingerprint-md5",
    "x509-fingerprint-sha1",
    "x509-fingerprint-sha256",
    "serial-number"
  ],
  "attributes": {
    "subject": {
      "description": "Subject of the certificate",
      "ui-priority": 1,
      "misp-attribute": "text"
    },
    "pubkey-info-algorithm": {
      "description": "Algorithm of the public key",
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "pubkey-info-size": {
      "description": "Length of the public key (in bits)",
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "pubkey-info-exponent": {
      "description": "Exponent of the public key",
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "pubkey-info-modulus": {
      "description": "Modulus of the public key",
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "x509-fingerprint-md5": {
      "description": "[Insecure] MD5 hash (128 bits)",
      "ui-priority": 1,
      "misp-attribute": "x509-fingerprint-md5",
      "recommended": false
    },
    "x509-fingerprint-sha1": {
      "description": "[Insecure] Secure Hash Algorithm 1 (160 bits)",
      "ui-priority": 1,
      "misp-attribute": "x509-fingerprint-sha1",
      "recommended": false
    },
    "x509-fingerprint-sha256": {
      "description": "Secure Hash Algorithm 2 (256 bits)",
      "ui-priority": 1,
      "misp-attribute": "x509-fingerprint-sha256"
    },
    "raw-base64": {
      "description": "Raw certificate base64 encoded (DER format)",
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "pem": {
      "description": "Raw certificate in PEM formati (Unix-like newlines)",
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "text": {
      "description": "Free text description of hte certificate",
      "ui-priority": 1,
      "misp-attribute": "text"
    },
    "validity-not-before": {
      "description": "Certificate invalid before that date",
      "ui-priority": 0,
      "misp-attribute": "datetime"
    },
    "validity-not-after": {
      "description": "Certificate invalid after that date",
      "ui-priority": 0,
      "misp-attribute": "datetime"
    },
    "issuer": {
      "description": "Issuer of the certificate",
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "serial-number": {
      "description": "Serial number of the certificate",
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "version": {
      "description": "Version of the certificate",
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "self_signed": {
      "description": "Self-signed certificate",
      "ui-priority": 0,
      "misp-attribute": "boolean"
    },
    "is_ca": {
      "description": "CA certificate",
      "ui-priority": 0,
      "misp-attribute": "boolean"
    },
    "dns_names": {
      "description": "DNS names",
      "multiple": true,
      "misp-attribute": "text",
      "ui-priority": 0
    }
  },
  "version": 7,
  "description": "x509 object describing a X.509 certificate",
  "meta-category": "network",
  "uuid": "d1ab756a-26b5-4349-9f43-765630f0911c",
  "name": "x509"
}