PSPKI icon indicating copy to clipboard operation
PSPKI copied to clipboard

Get-CertificateTemplate and setting CT_FLAG_SUBJECT_ALT_REQUIRE_SPN

Open NickyGr opened this issue 5 years ago • 1 comments

PSversion: 5.1.14393.0 PSPKIversion: 3.7.2

Dear PSPKI team, i've set up a CA Template with CT_FLAG_SUBJECT_ALT_REQUIRE_SPN enabled. When i run Get-CertificateTemplate it doesn't display a "normalized" Value on Settings->SubjectName like e.g when CT_FLAG_SUBJECT_ALT_REQUIRE_UPN is enabled. Instead the value 8388608 of the flag is displayed instead of something readable like: Subjectname: AltSubjectRequireSPN

Also when CT_FLAG_SUBJECT_ALT_REQUIRE_SPN is enabled and another setting is also enabled on Subject Name Tab the "non-normalized" sum value of all enabled settings in Subject Name tab is displayed.

Thank you in advance for your time, N.

Source for the SubjectNameFlags: https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/certreq_1

NickyGr avatar Oct 05 '20 13:10 NickyGr

I can confirm this issue and I have to address this issue to Microsoft since they don't have updated relevant documentation I use as trusted source.

Crypt32 avatar Oct 05 '20 13:10 Crypt32

Fixed in v4.0.0

Crypt32 avatar Jun 15 '23 07:06 Crypt32