Search Tokens for Details of Certificates
You can use search tokens to search for certificate details on Certificates tab.
asset.instance.lastFoundDateasset.instance.lastFoundDate
Use a date range or specific date to search last found instance.
Examples
Show the last found instances within certain dates
asset.instance.lastFoundDate: [2018-06-15 .. 2018-06-30]
Show the last found assets on a specific date
asset.instance.lastFoundDate:'2017-12-14'
asset.instance.gradeasset.instance.grade
Use a text value ##### to specify the Certificate Grade for an instance on the host.
Example
Show certificates that have this Certificate Grade for an instance on the host
asset.instance.grade: B
asset.instance.portasset.instance.port
Use an integer value ##### to specify the listening port.
Example
Show certificates on assets that have this listening port open
asset.instance.port: 443
asset.instance.pqcSupportasset.instance.pqcSupport
Use the token value as true or false to find if the instances have PQC support
Example
Show assets that have PQC-supported instances
asset.instance.pqcSupport:true
asset.instance.pqcSupportedAlgorithmasset.instance.pqcSupportedAlgorithm
Use a text value ##### to find the assets that have instances with the specified PQC supported algorithm.
Example
Show the assets that have instances supporting the PQC algorithm
asset.instance.pqcSupportedAlgorithm:MLKEM512
asset.instance.sourcesasset.instance.sources
Use a text value ##### to find the instances scanned through VM (Vulnerability Management), Qualys Cloud Agent and WAS (Web Application Scanning). Values are IP Scanner, Cloud Agent, EASM and/or WAS.
Examples
Show instances that are scanned through VM (Vulnerability Management)
asset.instance.sources: IP Scanner
Show instances that are scanned through Qualys Cloud Agent
asset.instance.sources: Cloud Agent
Show instances that are scanned through WAS
asset.instance.sources: WAS
Show instances that are scanned through EASM
asset.instance.sources: EASM
asset.instance.serviceasset.instance.service
Use a text value ##### to specify service.
Example
Show certificates on assets that have this service
asset.instance.service: SMTP
asset.instance.sslProtocolasset.instance.sslProtocol
Use a value ##### to specify SSL/TLS protocols.
Example
Show certificates on assets that have this SSL/TLS protocol
asset.instance.sslProtocols: TLSv1.2
asset.instance.wasUrlasset.instance.wasUrl
Use a text value ##### to specify WAS URL to search instances on the assets scanned by WAS.
Example
Show instances on assets scanned by WAS using WAS URL
asset.instance.wasUrl:"https://www.example.com"
Use a text value ##### to specify the asset name.
Example
Show assets that have this name
asset.name: server1
Supported Boolean Operators
The Qualys Query Language (QQL) supports the following logical or Boolean query operators. Use these operators in your queries to narrow down or broaden your search.
Narrow down the search by using the and operator in the Boolean query. The result contains all the token values that are provided in the query.
Example
asset.instance.grade:A and asset.instance.port:443
Narrow down the search by using the not operator in the Boolean query. The result contains all the other values except the one specified after not in the query.
Example
not asset.instance.grade:A
Broaden the search by using the or operator in the Boolean query. The result contains any of the token values that are provided in the query.
Example
asset.instance.grade:A or asset.instance.port:443
We do not support nested queries for combination of NOT and OR operators.
For example, not asset.instance.grade:A or asset.instance.port:443 is not a supported query.