Feature request: "X.509 Certificate" Object type

[tushev]

Every object virtually represents a pair of private key + certificate

Name - represents first entry from SAN

Extra Fields (all optional):

• SAN <MultiLineText,FreeEntry>
• Algorithm <Text,PredefinedOptions+FreeEntry> [RSA/ECC/Custom]
• Expiration date
• Protection <Text,PredefinedOptions+FreeEntry> [File/Yubikey/Keychain/TPM/Custom]
• KeyUsage <OID,MultipleOptions+PredefinedOptions+FreeEntry> [Digital Signature(), Non-Repudiation(), Key Encipherment ()]
• EnhancedKeyUsage <OID,MultipleOptions+PredefinedOptions+FreeEntry> [Server Authentication (1.3.6.1.5.5.7.3.1)/Client Authentication(...)]
• Ideally, support for other custom fields (if feasible, otherwise I'm OK with using desc/comments for that)

Bonus requests:

• It would be great if it would be possible to import an existing .crt that will have all fields parsed and filled, and inserted to the right place in hierarchy
• It would be great if there was a Expiry: 30 days addition in object tree

Example Tree:

Corporate Root CA
-- Signing subCA One
---- server1.example.com
---- server2.example.com

[danielmarschall]

@tushev Thank you for that suggestion! I am glad you are still using OIDplus and interested in it! :-) I will try to think about how this could be implemented. For a long time, I had the idea for a new table that could add arbitary data to any OID or RA. However, that table needs to be defined for every supported DBMS (SQL Server, MySQL, Oracle, PostgreSQL, Access, SQLite). I will notify you when I have news

[tushev]

@danielmarschall Thanks!

Yes, OIDplus is really great. There are other tools, designed specifically for managing/watching X.509 certificates, however, I prefer to have everything in the same place.