Using CertUtil to display certificates which will expire in a given date range

There are a number of articles online which give the syntax for filtering certutil’s output however they never seem to work for me with 2008 and 2008 R2 certificate servers.  The following command works for 2008 and 2008 R2 servers and filters on a date range as well as a certificate template.  I find that filtering on the certificate template as well as dates is really handy when different teams are responsible for different templates.

certutil -view -restrict "NotAfter>=01/10/2012 1:00 a.m.,NotAfter<=01/07/2013 1:00 a.m.,certificatetemplate=1.3.6.1.4.1.311.21.8.10618822.7602061.4000098.14529975.1041655.1.7250419.9462924" -out "RequestID,NotBefore,NotAfter,CertificateTemplate,CommonName" | more 

Note this command uses the certificate template OID rather than the display name, in the certsrv MMC you can get the OID by navigating to the certificate templates node.

Microsoft Communities – Wellington Infrastructure User Group Meeting

Just a quick note to say that Tony and myself have finally got over TechED and have organised another MSCommunities Infrastructure user group meeting for Wednesday the 14/11/2012. Nathan Mercer will be presenting Windows 8 in the Enterprise, those people who follow Nathans tweets will note that it appears he may have procured him self a surface or two. There is a good chance Nathan may bring his new toys with him to the meeting so that we can all have a play.

Given the change in location for the event spaces are even more limited than normal, so if you would like to come please register using the link below. Remember registrations will close once we hit seating capacity for the venue so get in quick.

http://www.mscommunities.co.nz/Events/Wellington-Infrastructure-User-Group—November-me.aspx