RELEASE Hacking CertNXtractionPack - Get your Switch cert from a NAND dump!

[admin]

Want your cert to access Nintendo's CDN, but you're not on 3.0.0 anymore so you can't run the PegaSwitch script?
Don't worry, I've got you covered!
Included in the pack is everything you need to generate a pfx certificate file from a NAND dump!

Usage:

• First, make sure Python3 and both the asn1 and pycrypto modules are installed.
• Next, copy your PRODINFO.bin partition into the folder
• Now, add the required keydata into "00_generate_ssl_kek.py", then run it; this will output the ssl_kek.
• Add the generated ssl_kek into "01_decrypt_privk_extract_cert.py", then run it, that will decrypt your private key and extract your cert.
• Then, run "02_convert_to_der.py", which will convert the extracted files into DER.
• Lastly, run "03_save_as_pfx.bat" to save it as an installable PFX certificate!
• Voila! You can now find your generated certificate in the new folder named "Out"!

How 2 get dem keyz???

• The first key is generated by XORing the AES_KEK (kek_mask 0) with the CryptoUsecase_RsaPrivate seed (kek_seed 1).
• The second key is the original master key, you can extract it from your keyblobs using hactool.
• The third and fourth keys are plaintext in the ssl sysmodule NSO.
• Or alternatively, you can skip this entire step by finding the ssl_kek online, not giving links for obvious reasons... (Trust me, it's out there!)