Parses the custom extensions on YubiHSM 2 attestation certificates and displays them in a human friendly manner. For more information about YubiHSM 2 attestations, see our developer documentation.
NOTE: This utility does not verify the supplied certificate has a chain back to a trusted certificate authority. You must verify this before relying on the output of this utility.
Binaries are available on the Releases page. You can also install from source using the command below.
go install github.com/YubicoLabs/yubihsm-parse-attestation@latest
yubihsm-parse-attestation <path_to_attestation_cert>
The --format
flag can be used to specify json
or yaml
output.