---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/pt-BR/security-management

 Release :

    - australia

ft:locale :

    - pt-BR

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# SSL Certificate Lookup: Exact Match found

# RISKIQ SSL certificate lookups that
return an exact match {#ariaid-title1}

* Versão de lançamento: Australia
* 
* Atualizado 12 de mar. de 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 min. de leitura

RISKIQ SSL certificate lookup
results for an exact match are displayed on the SSL Certificates tab
on the security incident record. An exact match provides a valid certificate authority name,
which helps a security incident analyst determine the validity of a website.  

## Exact match for a valid SSL certificate {#riskiq_ssl_exact_match__section_xpn_qpr_tdb}

The following example shows a valid issuer of an SSL certificate from an exact match
in the lookup results. Follow the steps to view the results and raw data.  
Nota:  
The figures in the following examples are shown with the Tabbed forms setting active in the System Settings. If your screen does not match the view shown below, follow the steps to set tabbed forms.

1. In the upper-right corner of the banner frame, click the Settings icon.
2. In the System Settings dialog box that is displayed, click Forms and verify that Tabbed forms and With the Form are selected.
{#riskiq_ssl_exact_match__ol_zjy_r42_ffb}

1. In the security incident record, click the SSL Certificates tab.Figura 1. SSL Certificates tab

   Information about the certificate issuer's name, the issuer's
   organization, and who the certificate is issued to (Organization) is
   displayed along with other data.

   18 items are displayed in the
   Issuer Name column. The second item
   (R3) provides a valid certificate authority
   name (Let's Encrypt) in the Issuer Organization column.
   No information in the Issuer Organization and Issued to columns is displayed for the second item (mail.dgtnetworks.com).
2. Click the second item in the Issuer namecolumn, which is (R3) to open the entry record. Alternatively, click the information icon next to the item followed by Open record.
3. Select the Raw Data tab.Figura 2. Raw Data tab

   The SSL Certificate Entry record includes the observable in the
   Raw Data tab under the Entity name column, as well as other data.
   Note in the Category column, the Subject, and Issuer correspond to recognizable entities in the Entity name column. The issuer of this certificate is most likely valid and from a trusted public certificate authority. Also note, the Subject, and Issuer are different entities. These separate entities indicate that the certificate is not an internally signed certificate from an unknown certificate authority.
{#riskiq_ssl_exact_match__ol_f4h_rqr_tdb}  

## Exact match for a self-signed SSL Certificate

The following example shows results for a self-signed SSL certificate from the
lookup. Follow the steps to view the results and raw data.

1. Navigate back to the security incident record. In the Issuer Name column, click the other item (mail.dgtnetworks.com).Figura 3. SSL Certificates tab
2. On the open record, select the Raw Data tab.Figura 4. Raw Data tab

   The Category column indicates the
   Issuer
   (mail.dgtnetworks.com and
   dgtsbs.DGTNetworks.local) are not trusted
   public certificate authorities. Also note the
   Issuer and
   Subject are the same entity
   (dgtsbs.DGTNetworks.local), and each
   contains the name of the observable (dgtsbs).
   This certificate is possibly a self-signed certificate. Self-signed
   certificates may warrant further investigation, as these certificates are
   not issued by a known certificate authority.
{#riskiq_ssl_exact_match__ol_nd5_btr_tdb}