Questions tagged [certutil]

Windows command for managing Certificate Services.

Certutil.exe is a command-line program that is installed as part of Certificate Services. You can use Certutil.exe to dump and display certification authority (CA) configuration information, configure Certificate Services, backup and restore CA components, and verify certificates, key pairs, and certificate chains. When certutil is run on a certification authority without additional parameters, it displays the current certification authority configuration. When cerutil is run on a non-certification authority, the command defaults to running the certutil -dump verb.

Useful links:

  1. CERTUTIL on technet.
  2. CERTUTIL on SS64 help pages.
99 questions
0
votes
2 answers

Shell - Set command output to a variable and replace

I am developing a PowerShell script for calculating checksum of zip files. I have to execute it in both W7 and W10. I have noticed that certUtil commmand returns strings like A2 5B 8A... in W7, but in W10 it returns the same string but without…
0
votes
1 answer

Possible to redirect CERTUTIL request for filepath to powershell variable?

I'm using the certreq command line utility to formulate a CSR amendment as follows (I simplified the syntax for clarity) $CertReqPath = "C:\Windows\System32\certreq.exe" $arg1="-config" $arg1a= $IssuingCA $arg2="-policy" $arg2a=…
Scepticalist
  • 3,737
  • 1
  • 13
  • 30
0
votes
1 answer

how to Add Certificate programmatically into Firefox version 59, Cannot find cert9.db in firefox folder

Good day. I have our own Certificate Authority (CA) that we need to add to Mozilla Firefox Browser, as ive researches that Firefox has its own certificate management. But we need to add it programmatically, as we have our own application that…
Rommel Sudan
  • 41
  • 1
  • 2
  • 6
0
votes
1 answer

CertUtil | How CertUtil -verifykeys works internally?

I have a CA certificate in Local Machine Certificate Store. When I run this command - enter code here certutil -verifyKeys gives Key "KEYNAME" verifies as the public key for Certificate "KEYNAME" V0.0 Signature test FAILED CertUtil: -verifykeys…
User1234
  • 1,543
  • 4
  • 22
  • 32
0
votes
1 answer

"Missing stored keyset" when using mix of bouncycastle and .NET

After successfully attaching a ECC private key to a X509Certificate2 that I retrieved from our PKI (following mostely the answer to this SO question), I have the requirement to do this without P/Invoke. So I try to attach the key using bouncycastle…
Frank
  • 2,036
  • 1
  • 20
  • 32
0
votes
1 answer

Installing a cert with nss-certutil during our install "sort of" failing with firefox 58

With the latest upgrade of Firefox (version 58), our product install has begun "failing" on Firefox. Basically, our installer code will query Firefox to see if our cert is already installed with nss-certutil -L -n name and if it is not found we then…
Bill
  • 1
  • 2
0
votes
0 answers

CertUtil importpfx Keyset does not exist

I have a p12 file, 'test.p12,' that has a certificate, the CA cert (self-signed), and private key for the certificate. The p12 file is generated using the BouncyCastle's C# API. When trying to import the certificate by using 'CertUtil', i.e.,…
hyongsop
  • 91
  • 2
  • 9
0
votes
1 answer

How to get jQuery AJAX result from NodeJS endpoint?

I successfully made an ajax call to a endpoint that I set up. I send it a raw certificate as JSON, and the backend decodes it. Now, I can bring up the decoded result with a console.log but I can't figure out how to return it as the result. Ajax…
hamza765
  • 106
  • 14
0
votes
1 answer

Firefox RootStore cert8.db/key3.db not existing

I want to access the Firefox Root Store under Windows (7) with Firefox 45.0.1. I found several sources that told me to navigate to C:\Users\{username}\AppData\Local\Mozilla\Firefox\Profiles\8ab3jkih.default\cert8.db. Unfortunately I can't find…
Bat
  • 311
  • 2
  • 13
0
votes
1 answer

Certutil.exe error exit code when running with elevated Start-Process

I'm trying to import a certificate with certutil.exe with a script. This script is launched with a non-admin user, and when reaching Start-Process command, windows UAC asks for admin credentials. $cmd="certutil.exe -addstore TrustedPeople…
Telkarion
  • 431
  • 5
  • 12
0
votes
0 answers

certutil.exe formatting the output in powershell

I am using certutil.exe to get a list of issued certificates and export them to a .txt file, the output comes back in rows even though i specify format-table, autosize or wrap options. here is the command i've used, where am I going…
Teja
  • 43
  • 2
  • 9
0
votes
1 answer

Check if certificate with specific serial no. exist in Firefox cert db

How can I check if a certificate with a specific serial number already exist in a cert db of a Firefox user profile? I've so far been using the command below to check it and then parse the output: certutil.exe -L -d…
Michael G
  • 39
  • 1
  • 8
0
votes
1 answer

EXE created from batch file doesn't run

I've attempted to store a base64 encoded exe within a batch file, then use certutil -decode to turn it back into an EXE. I've followed the first answer on this question to achieve this: Store a file inside of a batch file? but despite the newly…
Daniel Price
  • 1,132
  • 8
  • 18
0
votes
1 answer

Storing large file within batch file

I'm trying to create a batch file that stores one or more large files within it as base64 encoded strings, then converts them back into files. I've been following the first answer on this question: Store a file inside of a batch file? but i'm trying…
Daniel Price
  • 1,132
  • 8
  • 18
0
votes
2 answers

How to call from within Python an application with double quotes around an argument using subprocess?

I'm trying to call certutil from inside python. However I need to use quotation marks and have been unable to do so. My code is as follows: import subprocess output= subprocess.Popen(("certutil.exe", "-view", '-restrict "NotAfter <= now+30:00,…
Dorian
  • 1
  • 2