First published on TECHNET on Nov 30, 2006 I want to start this blog with a very basic topic: CRL checking.

The expression RequestID=$ instructs certutil to sort the database query from high to low and stop after the first entry is displayed. certutil -view -restrict "RequestId=$,Disposition=20" -out …

The next step in this process is to actually delete the rows using our trusty command line utility certutil.exe . The -deleterow verb, introduced in Windows Server 2003, can be used to delete …

When you are performing an operation on a remote CA, certutil requires the config string as input parameter. The common way to find out the config string is to run a certutil -dump command, …

If you try to use ‘personal’ with certutil, the command may complete but, check the store – no certificate is listed. This demonstrates that there are two names for each cert store – the ‘user …

Using the following command: CertUtil -InstallCert CACertFileName Example: Certutil -InstallCert FourthCoffeeSubCACert.cer When this command is run the Certificate Service Service on the …

Run certutil -crl to issue a fresh CRL. Distribute the new CRL: copy it to the HTTP CDP location (overwrite the old file) and, if applicable, use certutil -dspublish -f RootCA.crl to update it in …

First published on TECHNET on Apr 13, 2007 The CA is automatically publishing its own certificates and related CRLs into Active Directory if a LDAP reference...

First published on TECHNET on Apr 20, 2010 Introduction: When designing a public key infrastructure (PKI) for your organization, you must develop an effective disaster recovery plan …

Official documentation on certutil.exe is sparse, though, so this is left as an exercise for the reader if desired. Let us know if you have any additional questions on this by replying back to this …