Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

It seems that one of our Servers has a certificate that has expired, unfortunately we cannot find it, in other words, it's not in the local machine store or any of the personal stores of any of the support staff or any of the domain accounts currently in use.

Is there a way to list all and mean all certificates of all stores in windows 2003.

Get-ChildItem -Recurse Cert:

Does not work as it only retrieves the user and the local machine.

There are umpteen service accounts and quite a few potential domain accounts, so using the management console is not really an option.

Any ideas?

TIA

share|improve this question

migrated from superuser.com Jul 19 '12 at 0:35

This question came from our site for computer enthusiasts and power users.

    
What was the cert for? What broke? –  Zoredache Feb 3 '12 at 17:08
    
I was trying to find that out, i.e. what was the cert for, nothing broke. it was just highlighted as part of pen testing. –  ManyRootsofAllEvil Mar 7 '12 at 8:52
    
Open a command prompt at the root of the drive with the certs and type 'dir *.cer .pk7 /s' without the quotes, and replacing/adding filetypes as needed. –  Lizz Jan 5 '13 at 6:49

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.