Mirrors/pfSense-Certificate-Viewer
1
0
Fork 0
mirror of https://github.com/alvarsedano/pfSense-Certificate-Viewer.git synced 2025-04-19 08:55:11 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update result-example.md

Browse Source
This commit is contained in:
Alvaro Sedano 2019-07-22 02:27:53 +02:00 committed by GitHub
parent 1bac77de66
commit d7150bd840
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 41 additions and 39 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

80
result-example.md
View File

@ -2,16 +2,16 @@
Duplicated Serial Numbers (per CA) Duplicated Serial Numbers (per CA)
sIssuer SerialNumber FriendlyName DnsNameList sSubject revokedOn sIssuer|SerialNumber|FriendlyName|DnsNameList|sSubject|revokedOn
------- ------------ ------------ ----------- -------- --------- -------|------------|------------|-----------|--------|---------
internal-ca 2F hsanchez {hsanchez} hsanchez internal-ca|2F|hsanchez|{hsanchez}|hsanchez|
internal-ca 2F city1 {city1} city1 {revocados} internal-ca|2F|city1|{city1}|city1|{revocados}
internal-ca 30 audit03 {audit03} audit03 {revocados} internal-ca|30|audit03|{audit03}|audit03|{revocados}
internal-ca 30 uaIntro {uaIntro} uaIntro internal-ca|30|uaIntro|{uaIntro}|uaIntro|
internal-ca 31 city04 {city04} city04 internal-ca|31|city04|{city04}|city04|
internal-ca 31 uaDevice(2) {uaDevice} uaDevice internal-ca|31|uaDevice(2)|{uaDevice}|uaDevice|
internal-ca 32 fperez {fperez} fperez internal-ca|32|fperez|{fperez}|fperez|
internal-ca 32 uaExit(2) {uaExit} uaExit internal-ca|32|uaExit(2)|{uaExit}|uaExit|
This is the last part of the result returned by the script: It shows duplicated SerialNumbers 2F, 30, 31 and 32 This is the last part of the result returned by the script: It shows duplicated SerialNumbers 2F, 30, 31 and 32
To avoid issues when some of this certs is revoked, you must revoked all them, and recreate new certs forevery user involved. To avoid issues when some of this certs is revoked, you must revoked all them, and recreate new certs forevery user involved.
@ -24,35 +24,37 @@ every item of $listaC has these attributes:
```powershell ```powershell
PS C:\Users\me\Documents> $listaC[56] PS C:\Users\me\Documents> $listaC[56]
``` ```
EnhancedKeyUsageList : {Client Authentication (1.3.6.1.5.5.7.3.2)} Property|Value
DnsNameList : {uaDedicated01} --------|-----
SendAsTrustedIssuer : False EnhancedKeyUsageList | {Client Authentication (1.3.6.1.5.5.7.3.2)}
Archived : False DnsNameList | {uaDedicated01}
Extensions : {System.Security.Cryptography.Oid, System.Security.Cryptography.Oid, System.Security.Cryptography.Oid, System.Security.Cryptography.Oid...} SendAsTrustedIssuer | False
FriendlyName : uaDedicated01(02) Archived | False
IssuerName : System.Security.Cryptography.X509Certificates.X500DistinguishedName Extensions | {System.Security.Cryptography.Oid, System.Security.Cryptography.Oid, System.Security.Cryptography.Oid, System.Security.Cryptography.Oid...}
NotAfter : 12/07/2020 14:10:54 FriendlyName | uaDedicated01(02)
NotBefore : 13/07/2018 14:10:54 IssuerName | System.Security.Cryptography.X509Certificates.X500DistinguishedName
HasPrivateKey : False <-- NOT IMPORTED BY THIS POWERSHELL SCRIPT NotAfter | 12/07/2020 14:10:54
PrivateKey : NotBefore | 13/07/2018 14:10:54
PublicKey : System.Security.Cryptography.X509Certificates.PublicKey HasPrivateKey | False <-- NOT IMPORTED BY THIS POWERSHELL SCRIPT
RawData : {18, ...} PrivateKey |
SerialNumber : 3F PublicKey | System.Security.Cryptography.X509Certificates.PublicKey
SubjectName : System.Security.Cryptography.X509Certificates.X500DistinguishedName RawData | {18, ...}
SignatureAlgorithm : System.Security.Cryptography.Oid SerialNumber | 3F
Thumbprint : 4AD2BBE653414EE1A10E01FB3D26F62D003B52C7 SubjectName | System.Security.Cryptography.X509Certificates.X500DistinguishedName
Version : 3 SignatureAlgorithm | System.Security.Cryptography.Oid
Handle : 2788955271140 Thumbprint | 4AD2BBE653414EE1A10E01FB3D26F62D003B52C7
Issuer : CN=internal-ca, E=mail@mycompany.com, O=MYCOMP, L=myCity, S=myCity, C=ES Version | 3
Subject : CN=uaDedicated01, E=mail@mycompany.com, O=MYCOMP, L=myCity, S=myCity, C=ES Handle | 2788955271140
IsCA : False Issuer | CN=internal-ca, E=mail@mycompany.com, O=MYCOMP, L=myCity, S=myCity, C=ES
IsServer : False Subject | CN=uaDedicated01, E=mail@mycompany.com, O=MYCOMP, L=myCity, S=myCity, C=ES
IsClient : True IsCA | False
sIssuer : internal-ca IsServer | False
sSubject : uaDedicated01 IsClient | True
refid : 5b85b04689ad1 sIssuer | internal-ca
isRevoked : True sSubject | uaDedicated01
revokedOn : {revocados, revCAcert} refid | 5b85b04689ad1
isRevoked | True
revokedOn | {revocados, revCAcert}
--- ---
You can show certs that will expire in the next 90 days You can show certs that will expire in the next 90 days