Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

It seems that one of our Servers has a certificate that has expired, unfortunately we cannot find it, in other words, it's not in the local machine store or any of the personal stores of any of the support staff or any of the domain accounts currently in use.

Is there a way to list all and mean all certificates of all stores in windows 2003.

Get-ChildItem -Recurse Cert:

Does not work as it only retrieves the user and the local machine.

There are umpteen service accounts and quite a few potential domain accounts, so using the management console is not really an option.

Any ideas?


share|improve this question

migrated from Jul 19 '12 at 0:35

This question came from our site for computer enthusiasts and power users.

What was the cert for? What broke? – Zoredache Feb 3 '12 at 17:08
I was trying to find that out, i.e. what was the cert for, nothing broke. it was just highlighted as part of pen testing. – ManyRootsofAllEvil Mar 7 '12 at 8:52
Open a command prompt at the root of the drive with the certs and type 'dir *.cer .pk7 /s' without the quotes, and replacing/adding filetypes as needed. – Lizz Jan 5 '13 at 6:49

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.