Registration certificate

Last updated Oct 17, 2026 Inventory

AI summary

Application registration certificates are credentials for applications registered in Entra ID. Rencore Governance inventories these certificates and scans them on a configurable schedule (bi-weekly by default) to track properties like expiration dates, certificate types, key identifiers, and risk scores. You can monitor when certificates were created, last updated, and when they expire.

All application registration certificate of Entra ID

Part of the Entra ID inventory.

In Rencore Governance

Scan settings

Default scanning interval	Allowed scanning intervals	Data removal during incremental scan
Bi-Weekly	Daily, Weekly, Bi-Weekly, Monthly, Never, Initial	Yes

Properties

Property	Type	Description	Automation placeholder
Application	Application registration	Registration certificate for this application	`{{RegistrationCertificate.Application}}`
Application name	String	The display name for the application.	`{{RegistrationCertificate.ApplicationName}}`
Initially Scanned	DateTime	Shows when this object was initially found in a scan.	`{{RegistrationCertificate.CreatedTime}}`
Custom key identifier	String	Custom key identifier.	`{{RegistrationCertificate.CustomKeyIdentifier}}`
Display Name	String		`{{RegistrationCertificate.DisplayName}}`
End date	DateTime	The date and time at which the credential expires. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.	`{{RegistrationCertificate.EndDateTime}}`
Key id	String	The unique identifier (GUID) for the key.	`{{RegistrationCertificate.KeyId}}`
Last scan update	DateTime	Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change.	`{{RegistrationCertificate.LastModifiedTime}}`
Risk Score	Int32	Stores risk score	`{{RegistrationCertificate.RiskScore}}`
Risk Score Update	DateTime	Stores risk score update	`{{RegistrationCertificate.RiskScoreLastUpdate}}`
Risk Score Value	String	Stores risk score value like Low_Low	`{{RegistrationCertificate.RiskScoreValue}}`
Start date	DateTime	The date and time at which the credential becomes valid.The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.	`{{RegistrationCertificate.StartDateTime}}`
Type	String	The type of key credential; for example, Symmetric, AsymmetricX509Cert.	`{{RegistrationCertificate.Type}}`
Usage	String	A string that describes the purpose for which the key can be used; for example, Verify.	`{{RegistrationCertificate.Usage}}`

Relations

Relation	Connector	Description
Application registration	Entra ID	All Entra ID application registrations

Segments

This object does currently not have any segments.

Actions

This object does currently not have any actions.

Frequently asked questions

What is the registration certificate object in Rencore Governance?

All application registration certificate of Entra ID. Registration certificate is an object type in the Entra ID inventory of Rencore Governance.

Which properties does Rencore Governance collect for registration certificate?

Rencore Governance collects 14 properties for Registration certificate, such as Application, Application name, Initially Scanned and 11 more.

How often is registration certificate scanned?

By default bi-weekly. You can change the scan interval of Registration certificate objects under Configure objects (daily, weekly, bi-weekly, monthly, never or initial (collected once)). The interval is a target, not a guarantee: a scan can run later than planned.

Which module includes the Entra ID connector?

The Entra ID connector is part of the Digital Workplace module of Rencore Governance, which every Plan includes. The connector is generally available.

Was this page helpful?