CertDump secana

certificate pe pem pkcs7 portable-executable

Use this command to install CertDump:

winget install --id=secana.CertDump -e

CertDump is a command-line tool designed to extract signing certificates from Portable Executable (PE) files. It provides developers and security professionals with a straightforward way to analyze and retrieve certificates embedded in binaries.

Key Features:

Extracts certificates in PEM or DER formats for easy integration into workflows.
Supports installation via winget for seamless setup on Windows systems.
Cross-platform compatibility, running on Windows, Linux, and macOS.
Lightweight design with no external dependencies, ensuring quick execution.
Simple command-line interface with options to specify input files and output paths.

Audience & Benefit: Ideal for developers, security researchers, and IT professionals who need to analyze or validate certificates in executable files. CertDump streamlines the process of extracting certificates, reducing manual effort and improving workflow efficiency. Its cross-platform support ensures consistent functionality across different operating systems, while its minimalistic design minimizes complexity and learning curves.

CertDump

Cross-Platform tool to dump the signing certificate from a Portable Executable (PE) file.

Get CertDump

There are different ways to obtain CertDump. Please check, which works for your operating system.

Winget

The easiest ways to install CertDump is with winget.

winget install secana.CertDump

Github release

You find the latest Windows binaries under the Release page.

Dotnet Global Tool

You can install the latest version as a dotnet global tool. The tool runs on Windows, Linux and MacOs.

# install CertDump
dotnet tool install -g CertDump

# update CertDump
dotnet tool update -g CertDump

# uninstall CertDump
dotnet tool uninstall -g CertDump

The tool is automatically added to your path. Just run certdump from your shell. Example:

# Run CertDump
&gt; certdump -help
CertDump 1.1.1
Copyright (C) 2019 CertDump

  -f, --file    Required. Input file to dump the certificate from.

  -o, --out     (Default: cert.dump) Output file to dump the certificate to.

  --help        Display this help screen.

  --version     Display version information.

Release new version

A new version is automatically released from the master branch when a git tag is discovered.

Tag a release commit with: git tag -a v1.0.0 -m "CertDump v1.0.0".

Push the tag to the origin: git push origin v1.0.0

Replace the version number with the one to use.

Winget

It's not possible to automate the winget release at the moment. To release a new version, a new manifest file needs to be published manually to winget-pkgs certdump.

CertDump secana

README

CertDump

Get CertDump

Winget

Github release

Dotnet Global Tool

Release new version

Winget