Locksmith
Locksmith copied to clipboard
msPKI-Certificate-Name-Flag check in ESC1-3 could result in false negatives
msPKI-Certificate-Name-Flag check in ESC1-3 currently uses a direct comparison (-eq) instead of a bitwise comparison (-band) which could result in false negatives in situations where multiple msPKI-Certificate-Name-Flag bits are enabled.