如何提取SSL证书属性

Question

我想要一个可以在服务器上运行的工具，该工具将从已安装的SSL证书中提取并返回指定的属性。我特别感兴趣的是“发行人”和“指纹”属性。我知道我可以简单地打开证书的属性对话框并复制这些对话框，然后将它们粘贴到我的应用程序中，但是为了避免其他人在多个网站上执行此操作时可能出现的易于出错的手动过程，我想要一个工具或脚本我可以调用它只会从指定的证书返回指定属性的值。我很好，如果我需要分别打电话给每个所需的财产。交钥匙越多越好。有什么建议吗？

Answer 1

你想要做这样的事情：

Get-ChildItem Cert:\LocalMachine\Root\ | Select Issuer,Thumbprint 

这里是属性的列表，你可以很容易地从System.Security.Cryptography.X509Certificates.X509Certificate2对象（普通证书）获得。

Name     MemberType  Definition                                                     
----     ----------  ----------                                                     
Archived    Property  bool Archived {get;set;}                                                  
Extensions   Property  System.Security.Cryptography.X509Certificates.X509ExtensionCollection Extensions {get;}                                  
FriendlyName   Property  string FriendlyName {get;set;}                                                
Handle    Property  System.IntPtr Handle {get;}                                                 
HasPrivateKey  Property  bool HasPrivateKey {get;}                                                  
Issuer    Property  string Issuer {get;}                                                   
IssuerName   Property  System.Security.Cryptography.X509Certificates.X500DistinguishedName IssuerName {get;}                                   
NotAfter    Property  datetime NotAfter {get;}                                                  
NotBefore   Property  datetime NotBefore {get;}                                                  
PrivateKey   Property  System.Security.Cryptography.AsymmetricAlgorithm PrivateKey {get;set;}                                      
PublicKey   Property  System.Security.Cryptography.X509Certificates.PublicKey PublicKey {get;}                                      
RawData    Property  byte[] RawData {get;}                                                   
SerialNumber   Property  string SerialNumber {get;}                                                 
SignatureAlgorithm Property  System.Security.Cryptography.Oid SignatureAlgorithm {get;}                                         
Subject    Property  string Subject {get;}                                                   
SubjectName   Property  System.Security.Cryptography.X509Certificates.X500DistinguishedName SubjectName {get;}                                  
Thumbprint   Property  string Thumbprint {get;}                                                  
Version    Property  int Version {get;}                                                   
DnsNameList   ScriptProperty System.Object DnsNameList {get=,(new-object Microsoft.Powershell.Commands.DnsNameProperty -argumentlist $this).DnsNameList;;}                         
EnhancedKeyUsageList ScriptProperty System.Object EnhancedKeyUsageList {get=,(new-object Microsoft.Powershell.Commands.EnhancedKeyUsageProperty -argumentlist $this).EnhancedKeyUsageList;;}                  
SendAsTrustedIssuer ScriptProperty System.Object SendAsTrustedIssuer {get=[Microsoft.Powershell.Commands.SendAsTrustedIssuerProperty]::ReadSendAsTrustedIssuerProperty($this);set=$sendAsTrustedIssuer = $args[0]...