| title | sys.certificates (Transact-SQL) | ||||
|---|---|---|---|---|---|
| description | sys.certificates returns a row for each certificate in the database. | ||||
| author | VanMSFT | ||||
| ms.author | vanto | ||||
| ms.reviewer | randolphwest | ||||
| ms.date | 12/21/2022 | ||||
| ms.service | sql | ||||
| ms.subservice | system-objects | ||||
| ms.topic | reference | ||||
| ms.custom |
|
||||
| f1_keywords |
|
||||
| helpviewer_keywords |
|
||||
| dev_langs |
|
||||
| monikerRange | >=aps-pdw-2016 || =azuresqldb-current || =azure-sqldw-latest || >=sql-server-2016 || >=sql-server-linux-2017 || =azuresqldb-mi-current || =fabric-sqldb |
[!INCLUDE SQL Server Azure SQL Database Azure SQL Managed Instance Azure Synapse Analytics PDW FabricSQLDB]
Returns a row for each certificate in the database.
| Column name | Data type | Description |
|---|---|---|
| name | sysname | Name of the certificate. Is unique within the database. |
| certificate_id | int | ID of the certificate. Is unique within the database. |
| principal_id | int | ID of the database principal that owns this certificate. |
| pvt_key_encryption_type | char(2) | How the private key is encrypted. NA = There is no private key for the certificate MK = Private key is encrypted by the master key PW = Private key is encrypted by a user-defined password SK = Private key is encrypted by the service master key. |
| pvt_key_encryption_type_desc | nvarchar(60) | Description of how the private key is encrypted. NO_PRIVATE_KEY ENCRYPTED_BY_MASTER_KEY ENCRYPTED_BY_PASSWORD ENCRYPTED_BY_SERVICE_MASTER_KEY |
| is_active_for_begin_dialog | bit | If 1, this certificate is used to initiate encrypted service dialogs. |
| issuer_name | nvarchar(442) | Name of certificate issuer. |
| cert_serial_number | nvarchar(64) | Serial number of certificate. |
| sid | varbinary(85) | Login SID for this certificate. |
| string_sid | nvarchar(128) | String representation of the login SID for this certificate |
| subject | nvarchar(4000) | Subject of this certificate. |
| expiry_date | datetime | Date and time when certificate expires. |
| start_date | datetime | Date and time when certificate becomes valid. |
| thumbprint | varbinary(32) | SHA-1 hash of the certificate. The SHA-1 hash is globally unique. |
| attested_by | nvarchar(260) | System use only. |
| pvt_key_last_backup_date | datetime | The date and time the certificate's private key was last exported. |
| key_length | int | The certificate's key length. Applies to: [!INCLUDE sssql16-md] and later versions. |
[!INCLUDEssCatViewPerm] For more information, see Metadata Visibility Configuration.