name: certificates
description: "[Certificate
  authorities](https://en.wikipedia.org/wiki/Certificate_authority) installed in
  Keychains/ca-bundles."
examples: >-
  Replace 1QAZ2WSX with your Apple Developer ID, if you have one. This query
  will then let you identify Macs that have a copy of your code signing and
  notarization certificates.

  ```

  SELECT * FROM certificates WHERE common_"name" LIKE '%%1QAZ2SWX%%';

  ```
columns:
  - name: sid
    platforms:
      - windows
  - name: store_location
    platforms:
      - windows
  - name: store
    platforms:
      - windows
  - name: username
    platforms:
      - windows
  - name: store_id
    platforms:
      - windows
  - name: issuer2
    platforms:
      - linux
      - darwin
  - name: subject2
    platforms:
      - linux
      - darwin
notes: >-
  - This table should be used sparingly as it uses an Apple API which occasionally corrupts the underlying certificate. Learn more [here](https://github.com/fleetdm/fleet/issues/13065#issuecomment-1658849614).