TLS-Scanner icon indicating copy to clipboard operation
TLS-Scanner copied to clipboard

[Question] Trusted CAs

Open m10x opened this issue 11 months ago • 1 comments

Which JSON object indicates whether the certificate was signed by a trusted CA? I would guess that the "trusted" object does. However, this object is everytime "null"

            {
              "version": null,
              "subject": "C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1",
              "commonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
              "alternativeNames": null,
              "notBefore": 1617062400000,
              "notAfter": 1932595199000,
              "remainingDuration": null,
              "originalFullDuration": null,
              "publicKey": {
                "publicExponent": 65537,
                "modulus": 1.7976931348623157e+308,
                "algorithmType": "RSA"
              },
              "weakDebianKey": null,
              "issuer": "C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2",
              "x509SignatureAlgorithm": "SHA256_WITH_RSA_ENCRYPTION",
              "signatureAlgorithm": "RSA_PKCS1",
              "namedCurve": null,
              "hashAlgorithm": "SHA256",
              "extendedValidation": null,
              "certificateTransparency": null,
              "ocspMustStaple": null,
              "crlSupported": null,
              "ocspSupported": false,
              "revoked": null,
              "dnsCAA": null,
              "trusted": null, <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
              "sha256Fingerprint": "yAJfn8Zf38lbPKjMeGe5pYe1J3lzlXkXRj/IE9C2Jak=",
              "rocaVulnerable": false,
              "trustAnchor": false,
              "customTrustAnchor": false,
              "selfSigned": false,
              "leafCertificate": null,
              "extendedKeyUsageServerAuth": null,
              "extendedKeyUsagePresent": null,
              "sha256Pin": null,
              "signatureAndHashAlgorithmOid": {
                "encoded": "KoZIhvcNAQEL"
              },
              "supportedExtensionTypes": null,
              "keyUsageSet": null
            },

m10x avatar Dec 03 '24 10:12 m10x