Control ID: CA-TEMPLATE-005
Control Name: Template Enrollee Supplies Subject Validation
Severity: High
Status: Failure
Certificate Authority: Securetron-Lab-ROOT-CA
Execution Time: 2025-10-15 22:43:13
Duration: 00:00:00.0188124

Expected Result:
Templates with CT_FLAG_ENROLLEE_SUPPLIES_SUBJECT = 1 must be in the exclusion list

Evidence:
Template Enrollee Supplies Subject Analysis for Securetron-Lab-ROOT-CA:
  Templates Found: 3
  Control Enabled: Yes
  Exclusion List: [Securetron-TLS, Template-NAME] (from parameters.json)
  Non-Compliant Templates: 2

Template Enrollee Supplies Subject Usage:
  ✓ Securetron-TLS: CT_FLAG_ENROLLEE_SUPPLIES_SUBJECT = 1 (COMPLIANT (IN EXCLUSION LIST))
  ✗ Copy of Subordinate Certification Authority: CT_FLAG_ENROLLEE_SUPPLIES_SUBJECT = 1 (NON-COMPLIANT)
  ✗ SubCA: CT_FLAG_ENROLLEE_SUPPLIES_SUBJECT = 1 (NON-COMPLIANT)

Validation Results:
  Compliant Templates: 1
  Non-Compliant Templates: 2
  Overall: NON-COMPLIANT


Recommendation:
Update the following templates to remove CT_FLAG_ENROLLEE_SUPPLIES_SUBJECT or add them to the exclusion list: Copy of Subordinate Certification Authority, SubCA
