How can I print out the certificate information to, lets say a doc file. We need to gather certificate information, like exp dates/issued by, etc for machines/devices that are not part of the domain. I just need a command to get the general/detail info about a certificate, and I would like to do it from a batch file/dos command and not via the gui??? Any help is appreciated.

do you want to collect information from CA server or from local stores?My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com

local store, we need to pipe that information to a text file or something of that nature so we can massage the data later. However, the big thing is to just get the data into a file that can be massaged. However, I know they will ask for the info from the CA server later, so I might as well get all the information while I am asking... Thanks.

there are few solutions: 1) certutil -store my > c:\certs.txt 2) use powershell command. Since certutil's output is not very easy for further text parsing this solution might be preferred. For example: dir cert:\LocalMachine\my | Select SerialNumber, Subject, Issuer, NotBefore, NotAfter, Thumbprint | Export-Csv c:\certs.csv -notype All info will be exported in a familiar CSV file. However this will require installed PowerShell. My weblog: http://en-us.sysadmins.lv PowerShell PKI Module: http://pspki.codeplex.com

Thank you.

Is there a way to do this for a group of servers within a network? I'm trying to get various certificate information from different servers on a network. It would be most satisfying if I could end up with 2 scripts: one script for all 2003 servers, and a second script for all 2008 servers.