I would like to request an enhancement to the Get-SCEPCertificate function to support adding URLs to the Subject Alternative Name (SAN) extension using XCN_CERT_ALT_NAME_URL. This would allow users to include specific URIs, such as tag:microsoft.com,2022-09-14:sid:1234567890, in their certificate requests, providing greater flexibility for various use cases.
Proposed Solution:
Add a new parameter, such as -URL, to enable users to specify one or more URLs for the SAN extension.
Update the function to use $AlternativeNameObject.InitializeFromString($AlternativeNameType.XCN_CERT_ALT_NAME_URL, $Entry) when processing these URLs.
Use Case:
This feature would benefit organizations that rely on custom URIs in certificates, such as those used in Microsoft Intune or Network Access Control (NAC) solutions, making the certificate request process more adaptable.
Example Implementation:
$AlternativeNameObject` = New-Object -ComObject X509Enrollment.CAlternativeName
$AlternativeNameObject.InitializeFromString($AlternativeNameType.XCN_CERT_ALT_NAME_URL, "tag:microsoft.com,2022-09-14:sid:1234567890")
$Sans.Add($AlternativeNameObject)
Conclusion:
Adding this functionality would enhance the versatility of Get-SCEPCertificate. Thank you for considering this request!
I would like to request an enhancement to the
Get-SCEPCertificatefunction to support adding URLs to the Subject Alternative Name (SAN) extension usingXCN_CERT_ALT_NAME_URL. This would allow users to include specific URIs, such astag:microsoft.com,2022-09-14:sid:1234567890, in their certificate requests, providing greater flexibility for various use cases.Proposed Solution:
Add a new parameter, such as -URL, to enable users to specify one or more URLs for the SAN extension.
Update the function to use
$AlternativeNameObject.InitializeFromString($AlternativeNameType.XCN_CERT_ALT_NAME_URL, $Entry)when processing these URLs.Use Case:
This feature would benefit organizations that rely on custom URIs in certificates, such as those used in Microsoft Intune or Network Access Control (NAC) solutions, making the certificate request process more adaptable.
Example Implementation:
Conclusion:
Adding this functionality would enhance the versatility of
Get-SCEPCertificate. Thank you for considering this request!