Search notes:

certmgr.exe

certmgr.exe is the Certificate Manager tool. It manages certificates, certificate trust lists (CTLs), and certificate revocation lists (CRLs) from the command line.

Options

-add Add certificates, CRLs or CTLs to a storeFile or a system store
-del Delete certificates, CRLs or CTLs from a storeFile or a system store
-put Put an encoded certificate, CRL orCTL from a storeFile or a system store to a file. The file will be saved in X.509 format. -7 can be used to save the file in PKCS #7 format
-s Indicate the store is a system store
-r [currentUser|localMachine] The system store location. Default is currentUser
-c Certificates in the store
-crl Certificates revocation lists (CRLs) in the store
-ctl Certificates trust lists (CTLs) in the store
-v Verbose display of the certificates/CRLs/CTLs
-all All certificates, CRLs or CTLs in the store
-n <name> Common name of the certificate
-sha1 <thumbPrint> The sha1 hash of the certificate/CRLs/CTLs
-7 Save the destination store in PKCS #7 format
-e <encode> Certificate/CRL/CTL encoding type. Default to X509_ASN_ENCODING
-f <flag> CertStore open flags. Meaningful only if -y is set
-y <provider> CertStore provider name

See also

certmgr.msc
certutil.exe
SELFCERT.EXE (Under the root directory of an MS Office installation).

Index