topic what is the meaning of 1.3.6.1.4.1.25461.4.49.2 and 1.3.6.1.4.1.25461.4.49.1 found in a local PA certificate in GlobalProtect Discussions

what is the meaning of 1.3.6.1.4.1.25461.4.49.2 and 1.3.6.1.4.1.25461.4.49.1 found in a local PA certificate

Kalvin.Li — Tue, 05 Mar 2024 02:22:53 GMT

Issuer: C=US, O=Palo-Alto-Networks-Inc., CN=USC-Client-Issuing-CA2-G3
NotBefore: 03/29/2023 1:32 PM
NotAfter: 03/28/2024 1:32 PM
Subject: OID.1.3.6.1.4.1.25461.4.49.2=424908080, OID.1.3.6.1.4.1.25461.4.49.1=01790040595,

Re: what is the meaning of 1.3.6.1.4.1.25461.4.49.2 and 1.3.6.1.4.1.25461.4.49.1 found in a local PA certificate

JayGolf — Wed, 06 Mar 2024 07:17:49 GMT

Hi @Kalvin.Li ,

1.3.6.1.4.1.25461 is the root of the OID sub-tree assigned to Palo Alto Networks assigned by the Internet Assigned Numbers Authority (IANA).

回應： what is the meaning of 1.3.6.1.4.1.25461.4.49.2 and 1.3.6.1.4.1.25461.4.49.1 found in a local PA certificate

Kalvin.Li — Wed, 06 Mar 2024 06:53:20 GMT

Thanks JayGolf,

can i say this local certificate is owned and used by GlobalProtect service? What happen if this certificate expired? what GP service will be affected? Also, will this certificate have maintained and updated by GP agent?

回應： what is the meaning of 1.3.6.1.4.1.25461.4.49.2 and 1.3.6.1.4.1.25461.4.49.1 found in a local PA certificate

JayGolf — Thu, 07 Mar 2024 17:18:19 GMT

Which device did you pull this information from? Device certificates are used to be able to communicate with one or more cloud services .

回應： what is the meaning of 1.3.6.1.4.1.25461.4.49.2 and 1.3.6.1.4.1.25461.4.49.1 found in a local PA certificate

Kalvin.Li — Wed, 06 Mar 2024 07:57:46 GMT

this certificate found in all user's PC which has GlobalProtect agent installed only. The certificate is under Current user\Personal\Certificate