id: fortiweb-certificate

info:
  name: Fortinet FortiWEB Certificate - Detect
  author: johnk3r
  severity: info
  metadata:
    verified: true
    max-request: 1
    shodan-query: ssl:"cn=fortiweb"
  tags: ssl,tls,fortinet,fortiweb

ssl:
  - address: "{{Host}}:{{Port}}"

    matchers-condition: and
    matchers:
      - type: word
        part: subject_dn
        words:
          - "emailAddress=support@fortinet.com"

      - type: word
        part: subject_dn
        words:
          - "CN=FortiWEB"

    extractors:
      - type: dsl
        dsl:
          - 'subject_cn'
# digest: 4a0a0047304502207da449f871cbf515c27af92a03da7a8c0f4adbd8f4c4a21414adb1d240db5120022100a94b6ed3c3f85a83df3b1b05abee877f9a14ef89a5e20aa55335637792d5e75e:922c64590222798bb761d5b6d8e72950