Deleted app registration certificate

Last updated Oct 17, 2026 Inventory

AI summary

Rencore Governance tracks certificates from deleted applications in your Entra ID environment as part of its inventory. The system scans bi-weekly by default and records properties such as key identifiers, validity dates, and risk scores.

All deleted application registration certificate of Entra ID

Part of the Entra ID inventory.

In Rencore Governance

Scan settings

Default scanning interval	Allowed scanning intervals	Data removal during incremental scan
Bi-Weekly	Daily, Weekly, Bi-Weekly, Monthly, Never, Initial	Yes

Properties

Property	Type	Description	Automation placeholder
Initially Scanned	DateTime	Shows when this object was initially found in a scan.	`{{DeletedAppRegistrationCertificate.CreatedTime}}`
Custom key identifier	String	Custom key identifier.	`{{DeletedAppRegistrationCertificate.CustomKeyIdentifier}}`
Deleted application	Deleted application registration	Registration certificate for this application	`{{DeletedAppRegistrationCertificate.DeletedApplication}}`
Deleted application name	String	The display name for the application.	`{{DeletedAppRegistrationCertificate.DeletedApplicationName}}`
Display Name	String		`{{DeletedAppRegistrationCertificate.DisplayName}}`
End date	DateTime	The date and time at which the credential expires. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.	`{{DeletedAppRegistrationCertificate.EndDateTime}}`
Key id	String	The unique identifier (GUID) for the key.	`{{DeletedAppRegistrationCertificate.KeyId}}`
Last scan update	DateTime	Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change.	`{{DeletedAppRegistrationCertificate.LastModifiedTime}}`
Risk Score	Int32	Stores risk score	`{{DeletedAppRegistrationCertificate.RiskScore}}`
Risk Score Update	DateTime	Stores risk score update	`{{DeletedAppRegistrationCertificate.RiskScoreLastUpdate}}`
Risk Score Value	String	Stores risk score value like Low_Low	`{{DeletedAppRegistrationCertificate.RiskScoreValue}}`
Start date	DateTime	The date and time at which the credential becomes valid.The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.	`{{DeletedAppRegistrationCertificate.StartDateTime}}`
Type	String	The type of key credential; for example, Symmetric, AsymmetricX509Cert.	`{{DeletedAppRegistrationCertificate.Type}}`
Usage	String	A string that describes the purpose for which the key can be used; for example, Verify.	`{{DeletedAppRegistrationCertificate.Usage}}`

Relations

Relation	Connector	Description
Deleted application registration	Entra ID	All deleted applications registration in Entra ID

Segments

This object does currently not have any segments.

Actions

This object does currently not have any actions.

Frequently asked questions

What is the deleted app registration certificate object in Rencore Governance?

All deleted application registration certificate of Entra ID. Deleted app registration certificate is an object type in the Entra ID inventory of Rencore Governance.

Which properties does Rencore Governance collect for deleted app registration certificate?

Rencore Governance collects 14 properties for Deleted app registration certificate, such as Initially Scanned, Custom key identifier, Deleted application and 11 more.

How often is deleted app registration certificate scanned?

By default bi-weekly. You can change the scan interval of Deleted app registration certificate objects under Configure objects (daily, weekly, bi-weekly, monthly, never or initial (collected once)). The interval is a target, not a guarantee: a scan can run later than planned.

Which module includes the Entra ID connector?

The Entra ID connector is part of the Digital Workplace module of Rencore Governance, which every Plan includes. The connector is generally available.

Was this page helpful?