.. / certutil.exe

You can use certutil.exe to display certification authority (CA) configuration information, configure Certificate Services, and back up and restore CA components. The program also verifies certificates, key pairs, and certificate chains.

Functions:	Recon
Type:	Binaries
Toolsets:	Builtin

Recon

List issued certificates

certutil.exe -config casub1.ad.bitsadmin.com\LabSubCA1 -view csv | ConvertFrom-Csv

Usecase
Evaluate which certificates are being requested from the certificate authority

Comments
Alternatively use certutil.exe -v -config casub1.ad.bitsadmin.com\LabSubCA1 -view csv > certificates.txt to get a full dump which includes the .crt files of the issued certificates.

Updated: 2026-03-28

Contributor: Arris Huijgen (bitsadmin)