Export list of issued certificates from a CA to CVS for a certain

Export list of issued certificates from a CA to CVS for a certain

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Export list of issued certificates from a CA to CVS for a certain =?Utf-8?B?QmVuZGpp?= 05-04-2008
Posted by =?Utf-8?B?QmVuZGpp?= on May 4, 2008, 12:25 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Greetings all,

Was wondering if any know if it is possible export a list of issued
certificates to a cvs file?
I've created a certificate template and trying to se how many users have
received two or more certificates from that template. The CA mmc dont give a
clear picture since there’s too many certificates issued, so would like to
export a list of issued certificates and then use the list in Excel.
I guess the best bet is to use the command certutil -db and then pipe it to
a file. But any who knows a good or smart way to do it to export a list for a
certain template?

I’ve talking about a Microsoft Issuing CA, installed on an windows 2003
Enterprise server with SP2 installed.

Thanks in advance
Bendji


Posted by =?Utf-8?B?QmVuZGpp?= on May 5, 2008, 9:00 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I might as well answer my own question.
This can be done by using certutils:
certutil -view -restrict "Certificate Template=TempNameOrOID" -out
"requestername,requestid"
where TempNameOrOID should be replaced with the certificate templates name
or OID (I could only get it to work by using the OID, though the syntax says
it should be possible to use the name also).

Requestername and requestID can be exchanged to what you are searching for
in the certificates. I was only interested in the requester name so I ended
up piping this to a text file, for all the issuing CA's and then combined the
text files into an Excel spreadsheet. This gave me a nice count of all users
who had a certificate based on the template and how many certificates each
user had from that template.
Here is my complete query:
certutil -view -restrict "Certificate Template=TempNameOrOID" -out
"requestername,requestid" | find "Requester Name:" | sort >Text1.txt

/Bendji


"Bendji" wrote:

> Greetings all,
>
> Was wondering if any know if it is possible export a list of issued
> certificates to a cvs file?
> I've created a certificate template and trying to se how many users have
> received two or more certificates from that template. The CA mmc dont give a
> clear picture since there’s too many certificates issued, so would like to
> export a list of issued certificates and then use the list in Excel.
> I guess the best bet is to use the command certutil -db and then pipe it to
> a file. But any who knows a good or smart way to do it to export a list for a
> certain template?
>
> I’ve talking about a Microsoft Issuing CA, installed on an windows 2003
> Enterprise server with SP2 installed.
>
> Thanks in advance
> Bendji
>

Similar ThreadsPosted
Multiple certificates export from stand-alone ca June 29, 2007, 5:32 am
Moving newly issued Certificate May 27, 2008, 6:16 pm
Re: MS issued advisory, current exploit potential September 21, 2006, 3:46 am
Re: frequently-traveling users and their company-issued laptops August 31, 2006, 1:57 am
Re: frequently-traveling users and their company-issued laptops August 31, 2006, 1:58 am
Re: frequently-traveling users and their company-issued laptops August 31, 2006, 5:25 am
Re: frequently-traveling users and their company-issued laptops August 31, 2006, 9:26 am
How to extend expiry for Server Certs issued with W2k3 CA November 27, 2006, 5:19 am
frequently-traveling users and their company-issued laptops August 30, 2006, 6:32 pm
MSDN Download Error - The Server SSL certificate is issued by a ce April 21, 2008, 5:15 pm

The site map in XML format XML site map

Contact Us | Privacy Policy