When searching for insecure certificates, which types of certificates does Certificate Manager focus on?

When searching for insecure certificates, Certificate Manager specifically focuses on short keys. Short keys are typically associated with weaker encryption mechanisms that can be more easily compromised. These certificates, which have shorter key lengths, do not offer adequate security for protecting sensitive information or ensuring secure communications. By identifying these certificates, organizations can take steps to replace or enhance them with stronger cryptographic measures, thereby improving their overall security posture.

The other types of certificates, while they may also pose risks, do not specifically reflect the primary focus of Certificate Manager in the context of insecure certificates. For instance, while self-signed certificates can be seen as less secure due to lack of third-party validation, and wildcard certificates can present unique security challenges when not implemented correctly, the pinpoint focus in this context is on key length and strength, thus the emphasis on short keys.