New Post: Feature Request - Certificate Reporting

Hi Camelot,
Would it be possible to incorporate into PSPKI some kind of "easier capability" for generating reports on certificates? I might want to report on:

• List of certificates issued based upon template x between y and z (simply providing common name and SAN)
• All issued certificates (not revoked) about to expire in June 201x. (common name and expiry date)
• All certificates revoked last year by Submitter X
• Archived certificates and their corresponding KRA certificate(s)
  

These are a bunch of examples of reports which I often get asked to produce, and I can meet using various exercises with certutil -restrict, etc. However, I don't think it's a great tool and if it was possible to provide some better capability with PSPKI that'd be a fantastic enhancement IMHO.

I've no idea how easy or hard it would be to do - so if it's a no then it's easy for me to accept and continue to praise you for the great work you are doing.

Best regards, Chipeater