How to list and read all installed certificates (SSL) using Python ::Windows

Question

Need your help to write a code in python which will returns me a list of all installed certificates in my current system (those are listed in Certificate manager (Run -> certmgr.msc.)). Please help me to understand, how can I retrieve all the installed certificates in a python list and then I have check if certificate is valid or expired.

I used certifi (inbuilt library) to retrieve the list but it is not showing all the certificates that are installed on my computer.

import certifi
from cryptography import x509
from cryptography.hazmat.backends import default_backend


list_of_cert = certifi.contents().split("\n\n")

for cert in list_of_cert:
    details = x509.load_pem_x509_certificate(cert.encode('utf-8'), default_backend())
    print (details.issuer, details.not_valid_after)

Thank you in advance

Please help on this

Abhijeet Nikam
– Abhijeet Nikam

2021-05-28 05:58:43 +00:00
Commented May 28, 2021 at 5:58 — Abhijeet Nikam
– Abhijeet Nikam, Commented May 28, 2021 at 5:58

Justus Grunow · Accepted Answer · 2021-09-17 12:52:48Z

5

The issue is that the certifi library does not return certificates from the Windows certificate store. As per its documentation:

Certifi provides Mozilla’s carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts.

This should give you what you're looking for:

import ssl
from cryptography import x509

for store in ["CA", "ROOT", "MY"]:
    for cert, encoding, trust in ssl.enum_certificates(store):
        certificate = x509.load_der_x509_certificate(cert, backend=None)
        print(certificate.issuer, certificate.not_valid_after)

answered Sep 17, 2021 at 12:52

Justus Grunow

1,9251 gold badge18 silver badges25 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to list and read all installed certificates (SSL) using Python ::Windows

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related