I can see from looking at an old certlog that we have two certifier ids with the same name. The checksum for some users have one number and for others it is different.
This would explain the problems experienced with adminp when it comes to renames and re-certifications. We have moved users from several domains to a new domain and no longer have complete certlogs of registrations, so I need another means of identifying which users have been registered with which certifier.
I can extract the OU issuer name, and the subject name (user name) etc from the public key using @certificate.
Is there any way of using the @certificate, or some other means, to extract the digital fingerprint of the registering certifier from the user’s public key so that I can identify which cert.id registered the users?