Author Topic: Get collection of extensions of SSL cert  (Read 2048 times)

DeanLJ

  • Newbie
  • *
  • Posts: 1
  • Karma: +0/-0
    • View Profile
Get collection of extensions of SSL cert
« on: December 13, 2017, 03:23:25 PM »
Hi

I'm just evaluating your library (Python & PHP)

I have a need to inspect SLL certs and also check various things

One of the things i need to do is get the certificate extensions but i can't work out how to get them

given the cert at twitter.com for example, using pyOpenSSL I can get the cert extensions and check the basic constraints for CA:False or list of domains the cert is valid for etc

the only thing i can find in the lib is GetExtensionAsXml but that requires an oid

Am i able to get info like

            [basicConstraints] => CA:FALSE
            [subjectAltName] => DNS:twitter.com, DNS:www.twitter.com

thanks