Vadims Podans

I gave it a try and here is how it looks for OID tag:  This particular example is imperfect, however I can use converted SVGs to render them as...

Can you conduct a quick test: ```PowerShell ipmo PSPKI $xchg = Get-CA server.******.tld | Get-CAExchangeCertificate -X509 $ocspReq = New-Object SysadminsLV.PKI.OcspClient.OCSPRequest $xchg $ocspReq.SendRequest() ``` and show any error

Ok, so the problem is in ASN.1 parser which has some issues with parsing GeneralizedTime. Can you do one more test, please: ```PowerShell $rsp = Invoke-WebRequest -Uri "http://ocsp.domain.ca/ocsp/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQ2zpAvKWOUMw2afYilvaVl8dQIyQQUM4u/nCATOKj9kEr40DNXzdbTIZgCEyAAAMxsBtSL03bA/GgAAQAAzGw=" # ensure...

I was able to debug the code and find the root cause. The issue is that my ASN.1 parser is quite smart and found that your OCSP Responder KeyID attribute...

The fix will be available in v4.3

Thanks for reporting! The fix is added and will be available in v4.3. For now, you can manually change `Get-EnterprisePKIHealthStatus` as in this commit: https://github.com/PKISolutions/PSPKI/commit/475e2ab6794bbbe52762f9baf8f1d32bc35c80c5

This means that SAN extension doesn't exist in request. I've checked this scenario in my CA: ```PowerShell PS C:\> Connect-CA | Get-AdcsDatabaseRow -Table Extension -RowID 1001423 -Filter "ExtensionName -eq 2.5.29.17"...

You need to look into `ExtensionRawValue` which contains ASN.1-encoded SAN extension (in this particular case). You can decode it this way: ``` PS C:\> $extRawValue = "MCugKQYKKwYBBAGCNxQCA6AbDBlhZG1pbmlzdHJhdG9yQGNvbnRvc28uY29t" PS C:\> $bin...

After re-evaluating your inquiry, I found it reasonable to automatically decode extensions into managed objects (derivations of `X509Extension` class) as part of PSPKI. Here is the relevant ticket in underlying...

I've come with something that would simplify your use case. Here is the relevant pull request where it is addressed: https://github.com/Crypt32/pkix.net/pull/107 With next PSPKI release, you will be able to...