gnutls-certtool
executablemacOS239.2 KBarm64
Code signing utility — validates and manages digital signatures on executables
Validates code signatures on macOS binaries and manages certificate-based signing operations. Accesses the Keychain to retrieve signing identities and certificates, then applies or verifies signatures on executable files. Communicates with 16 network endpoints, likely for certificate validation, revocation checking, or timestamp services. Operates with ad-hoc signing capability and processes security-related file paths and URLs embedded in its configuration.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- arm64
- Min OS
- 26.0.0
- SDK
- 26.1.0
- File Size
- 239.2 KB
- UUID
- F87848C6-35C7-3E7B-8BC3-02D59790B650
- Analyzed
- 2026-04-09T08:46:49Z
- CDHash
- e9e3c3ec3382462f98e0a0087eccf27a2631c6aa57081fbb35c4eeb1a3f6449f
Capabilities
SecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecurityFrameworks13
Interesting Strings
Network Surface
Networking Frameworks
Endpoints(16)
Ipv41.3.6.1
Ipv45.5.7.3
Ipv45.5.7.21
Hostnamegnu.org
Hostnamegnutls.org
Hostnamewww.gnu.org
Ipv42.5.4.6
Ipv42.5.4.10
Ipv42.5.4.11
Ipv42.5.4.8
Ipv42.5.4.7
Ipv42.5.4.3
Ipv44.1.2.2
Hostnameoption.name
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
1
System
0
Behavioral Profile
URL Endpoints
2
Telemetry Strings
0
File Paths
2
Bundle IDs
0
IOKit Constants
0
Library Functions
42
Structural HashesSHA-256
Static Libraries42 / 245 functions identified
Identified Libraries
FLAC 1.5.0 (5 fn)SDL2 2.32.10 (5 fn)X11 1.8.12 (6 fn)Xi 1.8.2 (2 fn)aom 3.13.1 (5 fn)boost_graph 1.89.0 (2 fn)boost_iostreams 1.89.0 (1 fn)boost_locale 1.89.0 (2 fn)boost_log_setup 1.89.0 (1 fn)boost_regex 1.89.0 (1 fn)boost_test_exec_monitor 1.89.0 (2 fn)boost_wave 1.89.0 (1 fn)brotlienc 1.2.0 (1 fn)crypto 3.6.1 (2 fn)event 2.1.12_1 (1 fn)gettextlib 0.26_1 (1 fn)opus 1.6 (1 fn)ssh 0.11.3 (1 fn)tesseract 5.5.2 (1 fn)zmq 4.3.5_2 (1 fn)
Function Matches(1)
PEM_read_bioopenssl 3.2High
Functions(245)
0x100003df8app_exit
0x100003e24main
0x100004f64generate_self_signed
0x1000050e4generate_certificate
0x100005b30print_certificate_info
0x100005be4get_dig
0x100005c98certificate_info
0x100005ea4pubkey_info
0x100005f1ccrl_info
0x100006038print_crl_info
0x100006144crq_info
0x100006260print_crq_info
0x1000063c4privkey_info
0x100006578pkcs8_info_int
0x1000067a8generate_request
0x100006c88generate_private_key_int
0x1000072ccget_dig_for_pub
0x100007344verify_crl
0x1000075d4verify_pkcs7
0x100007a84load_tl
Imports411 symbols from 4 dylibs
Exports181
_mh_execute_header0x0
app_exit0x3df8
ask_pass0x288f0
batch0x288f4
cert_verify0xe2c0
certificate_info0x5c98
certtool_options0x28480
cfg0x28648
cfg_free0x169a0
cfg_init0x113d8
cfg_load0x169e4
cfg_next0x16f74
check_command0xfdc4
cipher_to_flags0xca44
compress_cert_set_methods0xe47c
crl_info0x5f1c
crq_extensions_set0x16844
crq_info0x6144
crt_constraints_set0x13d4c
crt_unique_ids_set0x14038
current_timespec0x17490
decode_seed0xd944
dh_info0xc73c
figure_key_format0xdc0c
figure_key_type0xda00
fix_lbuffer0xa9d8
full_format0x28468
generate_pkcs120x8104
generate_pkcs80x7ffc
generate_prime0xd508
generate_request0x67a8
generate_self_signed0x4f64
get_activation_date0x14d5c
get_bits0xbb30
get_ca_issuers_set0x1481c
get_ca_status0x14f10
get_cert_sign_status0x15da0
get_challenge_pass0x136f4
get_cn_crq_set0x1649c
get_cn_crt_set0x13c1c
get_code_sign_status0x15e64
get_confirmed_pass0x135e4
get_country_crq_set0x1601c
get_country_crt_set0x13814
get_crl_dist_point_set0x13730
get_crl_next_update0x15f40
get_crl_number0x14f68
get_crl_revocation_date0x14e04
get_crl_sign_status0x15dcc
get_crl_this_update_date0x14e4c
get_crq_extensions_status0x14f3c
get_data_encipherment_status0x15e38
get_dc_set0x15438
get_dn_crq_set0x16424
get_dn_crt_set0x13cd4
get_dns_name_set0x1558c
get_email_protection_status0x15ee8
get_email_set0x15320
get_encrypt_status0x15d64
get_expiration_date0x14e94
get_extensions_crt_set0x142b0
get_ip_addr_set0x15110
get_ipsec_ike_status0x15f14
get_key_agreement_status0x15df8
get_key_purpose_set0x14698
get_locality_crq_set0x1636c
get_locality_crt_set0x13b64
get_non_repudiation_status0x15e18
get_ocsp_issuer_set0x1475c
get_ocsp_sign_status0x15e90
get_oid_crq_set0x1660c
get_oid_crt_set0x141c4
get_organization_crq_set0x160d4
get_organization_crt_set0x138cc
get_other_name_set0x156cc
get_pass0x135a8
get_password0xabd8
get_path_len0x15024
get_pkcs12_key_name0x15060
get_pkcs9_email_crt_set0x148dc
get_policy_set0x15a74
get_proxy_policy0x15f5c
get_serial0x14994
get_sign_status0x15d28
get_state_crq_set0x162b4
get_state_crt_set0x13aac
get_system_time0x10660
get_time_stamp_status0x15ebc
get_tls_client_status0x150b8
get_tls_server_status0x150e4
get_tlsfeatures_set0x166f8
get_uid_crq_set0x16554
get_uid_crt_set0x1410c
get_unit_crq_set0x161c4
get_unit_crt_set0x139bc
get_uri_set0x15bfc
getenv_copy0x10024
getpass_copy0xffa0
gettime0x17484
hash_to_id0xdca0
infile0x288f8
lbuffer0x28470
lbuffer_size0x28478
load_ca_cert0xb6f8
load_ca_private_key0xb628
load_cert0xb0ac
load_cert_list0xb130
load_crl_list0xb358
load_private_key0xac60
load_privkey_list0xdef8
load_pubkey0xb870
load_public_key_or_import0xba5c
load_request0xb4f8
load_secret_key0xaae0
load_x509_private_key0xaee4
localtime_rz0x1966c
log_msg0xe444
log_set0x10654
main0x3e24
mktime_internal0x19a00
mktime_z0x19804
outfile0x28900
parse_datetime0x188b8
pin_callback0x10084
pkcs11_common0x10538
pkcs12_info0x87dc
pkcs7_generate0x7e34
pkcs7_info0x9140
pkcs7_sign0x7bb8
pkcs8_info0x9094
pkcs8_info_int0x6578
print_cert_info0xef88
print_cert_info20xef9c
print_dsa_pkey0xbcec
print_ecc_pkey0xc18c
print_gost_pkey0xc2ac
print_info0xe5e4
print_key_material0xfc70
print_list0xf314
print_private_key0xcbf4
print_pubkey_info0xc62c
print_rsa_pkey0xc46c
privkey_info0x63c4
process_options0x1072c
pubkey_info0x5ea4
raw_to_base640xe24c
raw_to_hex0xe1b4
raw_to_string0xe0f8
read_crq_set0x131b4
read_crt_set0x130b0
read_int0x132b8
read_str0x133c8
read_yesno0x134e0
reallocarray0x193bc
revert_tz0x195f0
rpl_fopen0x17130
rpl_free0x17378
rpl_fseek0x173ac
rpl_fseeko0x173b0
rpl_memmem0x1a270
rpl_mktime0x1a034
rpl_timegm0x198d8
safe_open_rw0xaa7c
secure_getenv0x193f0
serial_decode0x12f78
set_system_time0x10688
set_tz0x194e8
sign_params_to_flags0xde18
simple_ctime0x106c8
smime_to_pkcs70x93c0
sockets_init0x10648
str_to_curve0xc088
str_to_sec_param0xbbf0
str_unknown0x22e44
template_parse0x11410
tzalloc0x19428
tzfree0x194b8
usage0x113a8
verify_crl0x7344
verify_pkcs70x75d4
yyparse0x174b8