For ESC 3 the 2nd requirement is not evaluated

[LuemmelSec]

When enumerating for ESC 3, the values to meet the 1st group of requirements is taken into consideration and according templates are flagged as vulnerable. However the 2nd set, where the msPKI-RA-Application-Policies property needs to meet the OID=1.3.6.1.4.1.311.20.2.1=Certificate Request Agent is never evaluated.

I updated to OIDs and the find stuff accordingly, to take this into account, and also print out the templates meeting the 2nd group of criteria.

[LuemmelSec]

Okay, it somehow mangles the output:

Currently don't know why that is.

[LuemmelSec]

Okay, I am mistaken. This is a "problem" that was introduced to the code somewhere back in time. Tried it with the most current original code, and it is the same behavior. When using the BlackHat commit (https://github.com/GhostPack/Certify/commit/2b1530309c0c5eaf41b2505dfd5a68c83403d031), it works like expected: So it is no issue related to my PR.

[HarmJ0y]

I'm good with this, are you @leechristensen ?