签名证书的指纹

Question

I need to extract Thumbprints of few binaries' certificates. In PowerShell Get-AuthenticodeSignature can be used to get thumbprint value from binary, but if that file is Dual signed then also it shows only one thumbprint. Is there any Powershell/ .NET utility to check multi thumbprints?

Answer 1

Check out this brilliant article about why it's not possible by default and what's the workaround for that.

TL;DR:

Microsoft authenticode signature supports only one signature at a time. Additional signatures are done as nested signatures. First certificate can be easily accessed by using Get-AuthenticodeSignature and acessing SignerCertificate property. You have to use CryptoAPI to access additional certificates.

Once you follow the steps from the linked article you can simply run the following to get the information you need:

PS C:\> $sig = Get-AuthenticodeSignatureEx "C:\path\to\file.dll"
PS C:\> $sig | fl *