Certificate section

Valid arguments

fully qualified domain names e.g., example.com, printserver1.myunit.illinois.edu, uxa.cso.uiuc.edu
HTTPS URLs e.g., https://example.com, https://printserver1.myunit.illinois.edu, https://uxa.cso.uiuc.edu
full paths to PEM-encoded certificate files e.g., C:\Certificates\webserver.crt, \\fileshare.ad.uillinois.edu\Certificates\site-certificate

Purpose

Refer to one live website URL or live website fully qualified domain name.

Supported wildcards and quoting

"…" — Quoting references in the section header with double quote marks is supported. If you need a literal double quote mark, escape the double quote mark by prefixing with a backslash (\"). Backslashes can be listed literally and do not need to be escaped. If your reference contains a space, or if you want to list multiple references in the section header, you should quote each reference.
* — Use anywhere in the pathname to expand files and folders on the filesystem.

Notes

This section may be repeated as many times as needed.
If specified, only the URL scheme “https” is supported.
No HTTP redirection is supported; website URLs and fully qualified domain names must be the site delivering the certificate to be examined.

Suggested minimal permissions

For public-facing websites, no permission is needed because Martinet will use the same method to read the site certificate that the public uses.

If your website is behind something that requires permission to read the site certificate (such as a firewall) then you'll need to grant the Martinet service account and possibly the computer on which Martinet runs permission to traverse that barrier.

Example sections

[certificate:www.example.uillinois.edu]

[certificate:https://www.example.uillinois.edu]

[certificate:"C:\Users\wislande\my-new-certificate.pem" "example.net" "https://example.org"]