DnsNameProperty not working in Powershell 7.4.x and 7.5.x

[peeerle]

Summary of the new feature / enhancement

Dear all,

(Windows 11 resp. Win Srv 2025 Std 64 BIT)

The class DnsNameProperty seems not to be working with PWSH.
Although the class exists it is not working properly when using in conjunction with X509Certificate2.
Is that behavior be intention?
Is there a successor or other new path to get the values from certificate?

Explanation :
With Powershell 5.1 I can use it and the Property is automatically filled when I loaded a certificate.
With PWSH I can instantiate it with an instance of a certificate (after adding type with Microsoft.PowerShell.Security.dll), but the property DnsNameList is not filled.

Also the Property EnhancedKeyUsageList remains empty with PWSH when loading a certificate from a file.

Pls. advise a workaround or a better way to get the info from the file.

THX and beste regards!

Proposed technical implementation details (optional)

I tried to ways to load the cert with PWSH (partial pieces here only):
1.
[ type]$tpeCrtLdrTpe= 'System.Security.Cryptography.X509Certificates.X509CertificateLoader' -as [type]
$tpeCrtLdrTpe::LoadCertificateFromFile( $file)

[ X509Certificate2]::new( $thebytes)

Both ways seem to work correctly and creating the x509certicate2 instance.
But only with Windows Powershell all properties are filled.

[jborean93]

Have you ensued that the Microsoft.PowerShell.Security module has been loaded first? Without it then the format definition is still present for the X509Certificate2 type but the actual ETS property definitions have not been applied. Using Add-Type is not enough you need to import the module so it also loads the ETS data. The reason why WinPS 5.1 works out of the box without it is because it automatically loads the modules on startup where pwsh 7 does not and will only load on demand.

In this screenshot $cert was created with [X509Certificate2]::new and we can see that the ETS prop DnsNameList is not working/set until the Microsoft.PowerShell.Security module has been loaded.

[peeerle]

Hello jborean93,

THX a lot for your answer and contribution.
With Import-Module it works now.

As you mentioned, Add-Type was not the right way, but Import-Module is.

Best regards!

[microsoft-github-policy-service]

📣 Hey @@peeerle, how did we do? We would love to hear your feedback with the link below! 🗣️

🔗 https://aka.ms/PSRepoFeedback

Microsoft Forms