Export list of issued certificates from a CA to CVS for a certain

[Guest Bendji]

Greetings all,

 

Was wondering if any know if it is possible export a list of issued

certificates to a cvs file?

I've created a certificate template and trying to se how many users have

received two or more certificates from that template. The CA mmc dont give a

clear picture since there’s too many certificates issued, so would like to

export a list of issued certificates and then use the list in Excel.

I guess the best bet is to use the command certutil -db and then pipe it to

a file. But any who knows a good or smart way to do it to export a list for a

certain template?

 

I’ve talking about a Microsoft Issuing CA, installed on an windows 2003

Enterprise server with SP2 installed.

 

Thanks in advance

Bendji

[Guest Bendji]

I might as well answer my own question.

This can be done by using certutils:

certutil -view -restrict "Certificate Template=TempNameOrOID" -out

"requestername,requestid"

where TempNameOrOID should be replaced with the certificate templates name

or OID (I could only get it to work by using the OID, though the syntax says

it should be possible to use the name also).

 

Requestername and requestID can be exchanged to what you are searching for

in the certificates. I was only interested in the requester name so I ended

up piping this to a text file, for all the issuing CA's and then combined the

text files into an Excel spreadsheet. This gave me a nice count of all users

who had a certificate based on the template and how many certificates each

user had from that template.

Here is my complete query:

certutil -view -restrict "Certificate Template=TempNameOrOID" -out

"requestername,requestid" | find "Requester Name:" | sort >Text1.txt

 

/Bendji

 

 

"Bendji" wrote:

<span style="color:blue">

> Greetings all,

>

> Was wondering if any know if it is possible export a list of issued

> certificates to a cvs file?

> I've created a certificate template and trying to se how many users have

> received two or more certificates from that template. The CA mmc dont give a

> clear picture since there’s too many certificates issued, so would like to

> export a list of issued certificates and then use the list in Excel.

> I guess the best bet is to use the command certutil -db and then pipe it to

> a file. But any who knows a good or smart way to do it to export a list for a

> certain template?

>

> I’ve talking about a Microsoft Issuing CA, installed on an windows 2003

> Enterprise server with SP2 installed.

>

> Thanks in advance

> Bendji

> </span>