From 361631fd1e71813b03d73e563bf214df7e185136 Mon Sep 17 00:00:00 2001
From: Christoph <ckubu@oopen.de>
Date: Fri, 6 Feb 2026 22:04:59 +0100
Subject: [PATCH] get_all_keys.sh: check 'serial' instead of 'common name'.

---
 get_all_keys.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/get_all_keys.sh b/get_all_keys.sh
index 80e3edd..9365a57 100755
--- a/get_all_keys.sh
+++ b/get_all_keys.sh
@@ -306,11 +306,11 @@ if $EASYRSA_LAYOUT_NEW ; then
          _cn="$(openssl x509  -noout -text -in $_cert | grep Subject: | grep -oE "CN\s*=\s*[^,]+" | awk '{print$3}')"
       fi
 
-      if ! containsElement "$_cn" "${all_cn_arr[@]}" ; then
+      if ! containsElement "$_serial" "${all_cn_arr[@]}" ; then
          all_arr+=("${_serial}:$(trim $_cn)")
          all_cn_arr+=("$(trim $_cn)")
       fi
-      if ! containsElement "$_cn" "${revoked_cn_arr[@]}" ; then
+      if ! containsElement "$_serial" "${revoked_cn_arr[@]}" ; then
          active_arr+=("${_serial}:$(trim $_cn)")
       fi