I need to verify that two pfx files are indeed different certificates, and not the same data pasted two times. My constraints are:
- I don't have access to the certificate password, therefore I cannot use tools like "certutil -dump path" etc.
- As explained, I cannot rely on the file metadata (creation date, etc.) because I want to verify that the content is actually different.
I understand that the pfx file itself, sitting in the OS' filesystem, will have some metadata (file creation date, etc.) and actual data. I wonder if all the content of the pfx is ciphertext, since it is password protected, or if it contains also some structure like sections, where there is some ciphertext but also some accessible data like certificate ID etc. Obviously I opened both files with a plaintext editor and the content is very different, due to encryption, but I am not sure if I would be able to find common blocks if both certificates where, indeed, the same one.