id: fortigate-certificate

info:
  name: Fortinet FortiGate Certificate - Detect
  author: johnk3r
  severity: info
  metadata:
    verified: true
    max-request: 1
    shodan-query: ssl:"ou=fortigate"
  tags: ssl,tls,fortinet,fortigate,discovery

ssl:
  - address: "{{Host}}:{{Port}}"

    matchers:
      - type: word
        part: subject_dn
        words:
          - "OU=FortiGate"

    extractors:
      - type: dsl
        dsl:
          - 'domains'
# digest: 4a0a0047304502203e24bc7dbc8c87099f2af6db4c170b3828f8bfb1b5aaa233fb4bf4013bd1e6c50221009099a92c524871015cd1233542a1dc72958386fd3ab26d4b81b552e34bbc8fcf:922c64590222798bb761d5b6d8e72950