Export list of issued certificates from a CA to CVS for a certain

[Bendji]

Greetings all,

Was wondering if any know if it is possible export a list of issued
certificates to a cvs file?
I've created a certificate template and trying to se how many users have
received two or more certificates from that template. The CA mmc dont give a
clear picture since there’s too many certificates issued, so would like to
export a list of issued certificates and then use the list in Excel.
I guess the best bet is to use the command certutil -db and then pipe it to
a file. But any who knows a good or smart way to do it to export a list for a
certain template?

I’ve talking about a Microsoft Issuing CA, installed on an windows 2003
Enterprise server with SP2 installed.

Thanks in advance
Bendji

 

[Bendji]

I might as well answer my own question.
This can be done by using certutils:
certutil -view -restrict "Certificate Template=TempNameOrOID" -out
"requestername,requestid"
where TempNameOrOID should be replaced with the certificate templates name
or OID (I could only get it to work by using the OID, though the syntax says
it should be possible to use the name also).

Requestername and requestID can be exchanged to what you are searching for
in the certificates. I was only interested in the requester name so I ended
up piping this to a text file, for all the issuing CA's and then combined the
text files into an Excel spreadsheet. This gave me a nice count of all users
who had a certificate based on the template and how many certificates each
user had from that template.
Here is my complete query:
certutil -view -restrict "Certificate Template=TempNameOrOID" -out
"requestername,requestid" | find "Requester Name:" | sort >Text1.txt

/Bendji


"Bendji" wrote:

> Greetings all,
>
> Was wondering if any know if it is possible export a list of issued
> certificates to a cvs file?
> I've created a certificate template and trying to se how many users have
> received two or more certificates from that template. The CA mmc dont give a
> clear picture since there’s too many certificates issued, so would like to
> export a list of issued certificates and then use the list in Excel.
> I guess the best bet is to use the command certutil -db and then pipe it to
> a file. But any who knows a good or smart way to do it to export a list for a
> certain template?
>
> I’ve talking about a Microsoft Issuing CA, installed on an windows 2003
> Enterprise server with SP2 installed.
>
> Thanks in advance
> Bendji
>