Situation: an IIS 7.5 server with 30+ sites and 10+ certificates and a few certificates may be obsolete. Obsolete means they're not binded to the ip:port of any site on IIS.
I could check each site bindings through the GUI, but that seems not the fastest way.
With what command(s) can I get a list of sites using a certain certificate given its common name like
*.example.com. I think I need at least
netsh http show sslcert, but that output only shows the certificate hash and no site names.