Feature request: "X.509 Certificate" Object type

[tushev]

Every object virtually represents a pair of private key + certificate

Name - represents first entry from SAN

Extra Fields (all optional):

• SAN <MultiLineText,FreeEntry>
• Algorithm <Text,PredefinedOptions+FreeEntry> [RSA/ECC/Custom]
• Expiration date
• Protection <Text,PredefinedOptions+FreeEntry> [File/Yubikey/Keychain/TPM/Custom]
• KeyUsage <OID,MultipleOptions+PredefinedOptions+FreeEntry> [Digital Signature(), Non-Repudiation(), Key Encipherment ()]
• EnhancedKeyUsage <OID,MultipleOptions+PredefinedOptions+FreeEntry> [Server Authentication (1.3.6.1.5.5.7.3.1)/Client Authentication(...)]
• Ideally, support for other custom fields (if feasible, otherwise I'm OK with using desc/comments for that)

Bonus requests:

• It would be great if it would be possible to import an existing .crt that will have all fields parsed and filled, and inserted to the right place in hierarchy
• It would be great if there was a Expiry: 30 days addition in object tree

Example Tree:

Corporate Root CA
-- Signing subCA One
---- server1.example.com
---- server2.example.com