Certificate Thumbprint

[Deantwo]

I seem to be unable to compare the certificate fingerprint in RouterOS with the certificate thumbprint found in the Windows Certificate Store. I am not fully versed in what the difference is between the two, but I am guessing RouterOS simply doesn’t have the same kind of identifier? Is certificate thumbprint simply a Windows thing?

@https://wiki.mikrotik.com/wiki/Manual:System/Certificates

All certificate fingerprints are SHA1. Starting from v6.18 sha256 is used for certificate fingerprints and hashes.

I found some information about the Windows Certificate Thumbprint here: https://morgansimonsen.com/2013/04/16/understanding-x-509-digital-certificate-thumbprints/

Anyone know of a way to get around this issue?
Only thing I can think of is downloading the certificate from the router and getting the thumbprint from the local copy.

[idlemind]

Thanks answer is right there. Because RouterOS computes the thumbprint as SHA256 and MS uses SHA1 the values will appear different.

I am not able to test at the moment but you could use PowerShell in Windows 10:

Get-FileHash -Algorithm SHA256 -Path cert: ...

To check the thumbprint of a certificate in SHA2.

I’ll update the syntax when I boot up my laptop.