tshark reassembled TLSv1 record: Can it display certificate attributes for each certificate in a chain?

["Magnuson, Steve" <Steve.Magnuson2 () boeing com>]

Is there a way to tell tshark to display, for example, x509sat.printableString and x509af.utcTime attributes for each 
certificate in a certificate chain?  This command will only show the attributes for the first certificate in a 
certificate chain in a reassembled TLSv1 record:

tshark -r capture.pcap -T fields -e ip.src -e ip.dst -e x509sat.printableString -e x509af.utcTime

In Wireshark, it shows the reassembled certificate chain and you can look at attributes for each certificate, but 
tshark only shows the attributes for the first certificate - unless I'm missing something.

Thanks,

Steve



___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe