Hi we have a CA working fine, however my question is : is there any way to clean the CA from the UNUSED Certificate? or from the Expired certificate? or usually We don't clean the Old certificates? Thanks in advancedPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Remember to vote helpful,if the reply was helpful ,provinding information...

yes, this is possible. See 'certutil -deleterow -?' for specific syntax. Though you should consider few moments: http://blogs.technet.com/b/askds/archive/2010/08/31/the-case-of-the-enormous-ca-database.aspxhttp://en-us.sysadmins.lv

yes, this is possible. See 'certutil -deleterow -?' for specific syntax. Though you should consider few moments: http://blogs.technet.com/b/askds/archive/2010/08/31/the-case-of-the-enormous-ca-database.aspx http://en-us.sysadmins.lv Man Thanks alot Appreciate your Reply Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Remember to vote helpful,if the reply was helpful ,provinding information...