---
id: object/codeunit/1286
type: object
title: Codeunit 1286 "X509Certificate2"
summary: Codeunit 1286 "X509Certificate2" in System Application (System.Security.Encryption). 16 public procedures. Present since at least BC23, still in BC30, changed in BC24, BC27-28.
tier: official
language: en
tags:
  - codeunit
  - system application
versions:
  introduced: null
  last_changed: "28"
  deprecated: null
review:
  state: derived
  by: null
  at: null
  flags: []
generated:
  at: "2026-10-11T00:31:51.816Z"
  pipeline: 0.2.0
  prompts: {}
  input_hash: c453d69236f4048b525b1a62c7f6bce0c20319e244f852b63335d209c2d0df94
evidence:
  - kind: code
    url: https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/System%20Application/App/Cryptography%20Management/src/X509Certificate2.Codeunit.al
    title: src/System Application/App/Cryptography Management/src/X509Certificate2.Codeunit.al (releases/29.x)
    date: null
    commit: ea08af5ef2d6a9b5c5af4a029288abbe2c883220
    t: null
    quote: null
links:
  learn: []
  objects: []
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
object_type: codeunit
object_id: 1286
name: X509Certificate2
namespace: System.Security.Encryption
app: System Application
extends: null
first_version: "23"
last_version: "30"
present_in:
  - "23"
  - "24"
  - "25"
  - "26"
  - "27"
  - "28"
  - "29"
  - "30"
changed_in:
  - "24"
  - "27"
  - "28"
source_major: "29"
obsolete: null
countries: []
ms_search_form_ids: []
counts:
  fields: 0
  procedures: 16
  events: 0
  subscribers: 0
relations:
  out: 0
  referenced_by: 0
  pages: 0
  extended_by: 0
  event_subscribers: 0
  calls: 1
  called_by: 1
  implements: 0
---

# Codeunit 1286 "X509Certificate2"

> Codeunit 1286 "X509Certificate2" in System Application (System.Security.Encryption). 16 public procedures. Present since at least BC23, still in BC30, changed in BC24, BC27-28.

System Application · System.Security.Encryption · BC23-30 · [source at ea08af5e](https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/System%20Application/App/Cryptography%20Management/src/X509Certificate2.Codeunit.al) · facts from BC29

## Properties

| Property | Value |
|---|---|
| Access | Public |

## Procedures

- `VerifyCertificate(var CertBase64Value: Text; Password: SecretText; X509ContentType: Enum "X509 Content Type"): Boolean`: Verifes that a certificate is initialized and can be exported.
- `GetCertificateFriendlyName(CertBase64Value: Text; Password: SecretText; var FriendlyName: Text)`: Specifies the friendly name of the certificate based on it's Base64 value.
- `GetCertificateSubject(CertBase64Value: Text; Password: SecretText; var Subject: Text)`: Specifies the subject of the certificate based on it's Base64 value.
- `GetCertificateThumbprint(CertBase64Value: Text; Password: SecretText; var Thumbprint: Text)`: Specifies the thumbprint of the certificate based on it's Base64 value.
- `GetCertificateIssuer(CertBase64Value: Text; Password: SecretText; var Issuer: Text)`: Specifies the issuer of the certificate based on it's Base64 value.
- `GetCertificateExpiration(CertBase64Value: Text; Password: SecretText; var Expiration: DateTime)`: Specifies the expiration date of the certificate based on it's Base64 value.
- `GetCertificateNotBefore(CertBase64Value: Text; Password: SecretText; var NotBefore: DateTime)`: Specifies the NotBefore date of the certificate based on it's Base64 value.
- `HasPrivateKey(CertBase64Value: Text; Password: SecretText): Boolean`: Checks whether the certificate has a private key based on it's Base64 value.
- `GetCertificatePropertiesAsJson(CertBase64Value: Text; Password: SecretText; var CertPropertyJson: Text)`: Specifies the certificate details in Json object
- `GetCertificatePublicKey(CertBase64Value: Text; Password: SecretText): Text`: Gets Certificate public key
- `GetCertificatePrivateKey(CertBase64Value: Text; Password: SecretText): SecretText`: Gets Certificate private key
- `GetCertificateSerialNumber(CertBase64Value: Text; Password: SecretText; var SerialNumber: Text)`: Gets Certificate serial number
- `GetCertificateSerialNumberAsASCII(CertBase64Value: Text; Password: SecretText; var SerialNumberASCII: Text)`: Gets Certificate serial number as ASCII
- `GetCertificatePublicKeyAsBase64String(CertBase64Value: Text; Password: SecretText): Text`: Gets certificate public key as Base64 string
- `GetRawCertDataAsBase64String(CertBase64Value: Text; Password: SecretText): Text`: Returns the raw data for the certificate as a Base64 string.
- `CreateFromPemAndExportAsBase64(CertificateBase64: Text; PrivateKeyXmlString: SecretText; Password: SecretText): Text`: Creates a new instance of X509Certificate2 from the specified Base64 encoded certificate value. The certificate is exported as Base64 encoded string.

## Calls

From the extracted call graph of BC29 (graphify-al on the snapshot checkout): calls whose target is known from a declared type or an `Object::"Name"` argument. Interface dispatch and calls through events are not counted, so the list is not complete.

- [Codeunit 1285 "X509Certificate2 Impl."](../codeunit/1285.md) (16 calls: `CreateFromPemAndExportAsBase64 → CreateFromPemAndExportAsBase64`, `GetCertificateExpiration → GetCertificateExpiration`, `GetCertificateFriendlyName → GetCertificateFriendlyName`, …)

## Called by

- [Codeunit 2202 "Azure Key Vault Impl."](../codeunit/2202.md) (1 call: `GetCertificateFromClient → GetCertificateThumbprint`)

## Across versions

- Present in: BC23-30
- Changed (declaration) in: BC24, BC27-28

Source: AL metadata extracted from the code (names, ids, signatures, properties); no code bodies (D10).

## Ask your agent

Procedure bodies are not stored here (D10). The call sections above are our own, per object, from the BC29 call graph. For a procedure body or the calls of one procedure, ask bc-code-atlas (external, by Stefan Maron, MIT; default corpus w1-28), which the bc-observatory plugin connects: `bcatlas_resolve_node(object_type: "codeunit", object_name: "X509Certificate2")`, then `bcatlas_get_procedure_body` or `bcatlas_get_neighbors` on the returned id.