Questions tagged [certutil]

Windows command for managing Certificate Services.

Certutil.exe is a command-line program that is installed as part of Certificate Services. You can use Certutil.exe to dump and display certification authority (CA) configuration information, configure Certificate Services, backup and restore CA components, and verify certificates, key pairs, and certificate chains. When certutil is run on a certification authority without additional parameters, it displays the current certification authority configuration. When cerutil is run on a non-certification authority, the command defaults to running the certutil -dump verb.

Useful links:

  1. CERTUTIL on technet.
  2. CERTUTIL on SS64 help pages.
99 questions
0
votes
1 answer

Certutil.exe connects to external resources

While performing certificate verification the certutil.exe connects to different external resources. The util freezes for 5-10 seconds on the step CERT_CHAIN_POLICY_BASE, on endentity and even Root certificates. How it can be disabled and why does…
Audrick
  • 3
  • 3
0
votes
0 answers

How to generate one hash key for a directory in PowerShell?

This is what I am doing on linux cat a-directory/* | md5 What would be the alternative in PowerShell, maybe something with CertUtil? The reason I am doing this is that I want to make sure I can copy a large directory.
user8369515
  • 485
  • 1
  • 5
  • 16
0
votes
1 answer

x509Chain.build fails, certutil -verify passes

I have a root certificate and a leaf. The leaf has a CRL URL OID extension which points to a valid online location. Doing this: certutil -verify .\leaf.cer fails with ERROR: Verifying leaf certificate revocation status returned The revocation…
0
votes
1 answer

Restrict my certificate list on the basis of ExpirationDate in certutil -view -restrict cmd

Is there a way to restrict my certificate list on the basis of ExpirationDate of a certificate in certutil -view -restrict command? I have nearly 2 million certificates. It is very hard to find in the excel file as excel does not open it very…
Ashish
  • 75
  • 2
  • 9
0
votes
1 answer

Ubuntu18 firefox Add trust to a exsisting certificate

Im using ubuntu18 desktop and i have added the certificates i need to firefox 73.0: /usr/share/ca-certificates/mozilla and also added it to : /etc/ca-certificates.conf At the end of the file like : mozilla/caname.crt And run :…
gsr
  • 169
  • 2
  • 19
0
votes
1 answer

Visual Studio Extension certificate validation fails for Votive (Wix)

Installing Votive, an extension for Wix - Windows Installer fails for both Votive 2017 and Votive 2019 Visual Studio extension. The reason is a certificate validation error. How can you update your root certificates and install the Visual Studio…
Tore Aurstad
  • 3,189
  • 1
  • 27
  • 22
0
votes
1 answer

Is there any way to find out the hash value of two files?

I have the python code which generates the hash value of two files. The first file is located in c:\windows\system32\wscript.exe and another file which is the clone of the first file which is located in d:\clone.exe. python code import…
0
votes
0 answers

Windows 10 pro importing certificate through command line create a duplicate store

I am trying to import a certificate into my "Local computer" account under "Personal" certificate store. Though when running one of the below 2 commands, the certificate is imported into a new certificate store called also Personal. First…
Jotta E
  • 292
  • 5
  • 14
0
votes
1 answer

windows - Why firefox only trust certificate which certutil install?

I recent research about certificate in windows. I try two different way to install certificate: 1. Use certutil command to install. ex: certutil -addstore -f "ROOT" rootCA.pem 2. Use Microsoft api to install. certStore = CertOpenSystemStore(NULL,…
zonda
  • 25
  • 1
  • 4
0
votes
0 answers

Elevating permission error while running batch prom code

I am trying to remove old certificates from the os so i wrote a method for that: public ActionResult DeleteOldCertificates(Session session) { try { return (DeleteAutority(session) == ActionResult.Success …
szpic
  • 4,346
  • 15
  • 54
  • 85
0
votes
0 answers

Create CSR with 256 SANs

Have 256 iDRACs that have never had an SSL cert. First I tried using a power-shell script to have the iDRACS themselves create the CSR individually, Issue with that is, older versions of iDRAC will not create Subject Alternate Name for the certs.…
Shane
  • 1
  • 1
0
votes
0 answers

Certificate Revocation check failing in Windows Server 2016

Command certuil.exe -verify fails with the error - 'Cannot find object or property. 0x80092004 (-2146885628 CRYPT_E_NOT_FOUND)' in Windows server 2016. The error is not seen in 2012 \ 2008. Any help would be appreciated.
0
votes
1 answer

Import SSL certificate by certutil in InstallShield

I have a function as below : function LONG ImportSSL(hMSI) STRING exeDir; STRING sslDir; NUMBER nvSize; LONG ret; begin nvSize = 256; MsiGetProperty (hMSI, "SETUPEXEDIR", exeDir, nvSize); sslDir =…
Aria
  • 3,724
  • 1
  • 20
  • 51
0
votes
1 answer

Display name Certificate OID - Windows

I installed a certificate in two windows machines (both windows 7 x86) and when I access the properties of this certificate by certmgr, the "Subject Alternative Name" section are different for both machines. The one that contains "2.16.76.1.3.3" is…
Lucas
  • 1
  • 1
0
votes
1 answer

Query Certificates for SHA1 / SHA2 / SHA256

I know we can do this in PowerShell. (Get-ChildItem Cert:\Currentuser\My\ | Select -Property SignatureAlgorithm -ExpandProperty…
Leptonator
  • 3,379
  • 2
  • 38
  • 51