{"id":20061,"date":"2023-09-28T11:25:41","date_gmt":"2023-09-28T15:25:41","guid":{"rendered":"https:\/\/kevinjustin.com\/blog\/?p=20061"},"modified":"2023-12-04T14:24:34","modified_gmt":"2023-12-04T18:24:34","slug":"delete-pki-certificates","status":"publish","type":"post","link":"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/","title":{"rendered":"Delete PKI certificates"},"content":{"rendered":"<figure id=\"attachment_20062\" aria-describedby=\"caption-attachment-20062\" style=\"width: 531px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/FedReserveBondCertificate.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-20062\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/FedReserveBondCertificate.jpg\" alt=\"Don't you wish this were the certificates we worked with!\" width=\"531\" height=\"600\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/FedReserveBondCertificate.jpg 531w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/FedReserveBondCertificate-266x300.jpg 266w\" sizes=\"auto, (max-width: 531px) 85vw, 531px\" \/><\/a><figcaption id=\"caption-attachment-20062\" class=\"wp-caption-text\">Don&#8217;t you wish this were the certificates we worked with!<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>Man, I wish I had a few of these certificates in my PKI infrastructure (portfolio)!\u00a0 Ever need to identify an expired certificate, and or delete the certificate?\u00a0 Depending on UAC, AppLocker, and other settings, the delete portion may require server logon.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h3>Identify an expired certificate<\/h3>\n<p>Few ways to identify an expired certificate on servers.<\/p>\n<h4>Via RDP session to server<\/h4>\n<p>RDP to server, open MMC &gt; Add Plug In &gt; Certificates &gt; for Computer<\/p>\n<figure id=\"attachment_20065\" aria-describedby=\"caption-attachment-20065\" style=\"width: 1380px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/PKI-MMC-Certificates-Computer.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-20065\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/PKI-MMC-Certificates-Computer.jpg\" alt=\"RDP to server, MMC, Certificates Plug In, Computer, expand certificate store to find expired certificate.\" width=\"1380\" height=\"574\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/PKI-MMC-Certificates-Computer.jpg 1380w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/PKI-MMC-Certificates-Computer-1200x499.jpg 1200w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/PKI-MMC-Certificates-Computer-300x125.jpg 300w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/PKI-MMC-Certificates-Computer-768x319.jpg 768w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/PKI-MMC-Certificates-Computer-1024x426.jpg 1024w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 1362px) 62vw, 840px\" \/><\/a><figcaption id=\"caption-attachment-20065\" class=\"wp-caption-text\">RDP to server, MMC, Certificates Plug In, Computer, expand certificate store to find expired certificate.<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<h4>Via PowerShell<\/h4>\n<p style=\"padding-left: 40px;\"><span style=\"color: #3366ff;\">GCI Cert:\\LocalMachine\\*<\/span><\/p>\n<p style=\"padding-left: 40px;\">The certificate store file path will vary the above command.<\/p>\n<p style=\"padding-left: 40px;\"><span style=\"color: #ff0000;\">NOTE the SuperUser <a style=\"color: #ff0000;\" href=\"https:\/\/superuser.com\/questions\/217719\/what-are-the-windows-system-certificate-stores\" target=\"_blank\" rel=\"noopener\">blog post<\/a> will help decipher the folder name<\/span><\/p>\n<p>&nbsp;<\/p>\n<h4>Via &#8216;smart&#8217; PowerShell across multiple machines<\/h4>\n<p style=\"padding-left: 40px;\">Courtesy of Vance Cozier!<\/p>\n<p style=\"padding-left: 40px;\"><span style=\"color: #3366ff;\">&#8220;server1&#8221;,&#8221;server2&#8243;| % {invoke-command $_ -scriptblock {$env:ComputerName; GCI Cert:\\LocalMachine\\* }}<\/span><\/p>\n<p>&nbsp;<\/p>\n<h4>Via Monitoring for expired certificates<\/h4>\n<p>Using SCOM Certificate Monitoring or PKI monitoring management packs<\/p>\n<p style=\"padding-left: 40px;\">Identify Expired certificates<\/p>\n<p style=\"padding-left: 40px;\"><strong>Console navigation steps:<\/strong><\/p>\n<p style=\"padding-left: 80px;\">From SCOM console &gt; Monitoring Tab<\/p>\n<p style=\"padding-left: 80px;\">Expand PKI folder &gt; Expand Certificates and CRLs folder<\/p>\n<p style=\"padding-left: 80px;\">Click on &#8216;Certificates &#8211; Expired&#8217; state view<\/p>\n<figure id=\"attachment_20070\" aria-describedby=\"caption-attachment-20070\" style=\"width: 261px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/SCOM-ExpiredCertificatesStateView.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-20070\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/SCOM-ExpiredCertificatesStateView.jpg\" alt=\"SCOM Expired PKI certificates state view.\" width=\"261\" height=\"280\" \/><\/a><figcaption id=\"caption-attachment-20070\" class=\"wp-caption-text\">SCOM Expired PKI certificates state view.<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<h3>Did you know<\/h3>\n<p>Run PowerShell commands from Holman&#8217;s SCOM Management pack (<a href=\"https:\/\/kevinholman.com\/2017\/05\/09\/scom-management-mp-making-a-scom-admins-life-a-little-easier\/\" target=\"_blank\" rel=\"noopener\">blog<\/a>)- <a href=\"https:\/\/github.com\/thekevinholman\/SCOM.Management\" target=\"_blank\" rel=\"noopener\">github download<\/a><\/p>\n<p><strong>Run PowerShell from Monitoring tool<\/strong><\/p>\n<p style=\"padding-left: 40px;\">From SCOM console &gt; Monitoring Tab &gt; SCOM Management folder &gt; SCOM Agents<\/p>\n<p style=\"padding-left: 40px;\">Highlight agent(s)<\/p>\n<p style=\"padding-left: 40px;\">From Tasks Pane &gt; click on \u2018Execute any PowerShell\u2019 task<\/p>\n<figure id=\"attachment_20072\" aria-describedby=\"caption-attachment-20072\" style=\"width: 1546px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/ExecutePowerShell.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-20072\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/ExecutePowerShell.jpg\" alt=\"SCOM Management pack, SCOM Agents, highlight agent(s), click on Task Pane &gt; Execute any PowerShell task.\" width=\"1546\" height=\"709\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/ExecutePowerShell.jpg 1546w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/ExecutePowerShell-1536x704.jpg 1536w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/ExecutePowerShell-1200x550.jpg 1200w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/ExecutePowerShell-300x138.jpg 300w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/ExecutePowerShell-768x352.jpg 768w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/ExecutePowerShell-1024x470.jpg 1024w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 1362px) 62vw, 840px\" \/><\/a><figcaption id=\"caption-attachment-20072\" class=\"wp-caption-text\">SCOM Management pack, SCOM Agents, highlight agent(s), click on Task Pane &gt; Execute any PowerShell task.<\/figcaption><\/figure>\n<p style=\"padding-left: 40px;\">On the pop-up window, click Override<\/p>\n<p style=\"padding-left: 40px;\">Adjust timeout to 70 (seconds)<\/p>\n<p style=\"padding-left: 40px;\">Override command line<\/p>\n<p style=\"padding-left: 80px;\">Run the following commands (various Certificate store examples provided for removing expired certificates)<\/p>\n<p style=\"padding-left: 80px;\"><strong>Personal Certificates folder<\/strong><\/p>\n<p style=\"padding-left: 80px;\">Get-ChildItem Cert:\\LocalMachine\\My | ? { (( $_.Subject -like &#8220;*GlobalSign*&#8221; ) -OR ( $_.Issuer -like &#8220;*GlobalSign*&#8221; )) -and $_.NotAfter -lt (get-date) } | fl Subject,Issuer<\/p>\n<p style=\"padding-left: 80px;\"><strong>Trusted Root folder<\/strong><\/p>\n<p style=\"padding-left: 80px;\">Get-ChildItem Cert:\\LocalMachine\\Root | ? { ( $_.Subject -like &#8220;*GlobalSign*&#8221; ) -OR ( $_.Issuer -like &#8220;*GlobalSign*&#8221; ) } | fl\u00a0 Subject,Issuer<\/p>\n<p style=\"padding-left: 80px;\"><strong>Third Party Root<\/strong><\/p>\n<p style=\"padding-left: 80px;\">Get-ChildItem Cert:\\LocalMachine\\AuthRoot | ? { (( $_.Subject -like &#8220;*GlobalSign*&#8221; ) -OR ( $_.Issuer -like &#8220;*GlobalSign*&#8221; )) -and $_.NotAfter -lt (get-date) } | fl Subject,Issuer<\/p>\n<figure id=\"attachment_20073\" aria-describedby=\"caption-attachment-20073\" style=\"width: 775px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/RunTask.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-20073\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/RunTask.jpg\" alt=\"Run PowerShell task.\" width=\"775\" height=\"697\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/RunTask.jpg 775w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/RunTask-300x270.jpg 300w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/RunTask-768x691.jpg 768w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 984px) 61vw, (max-width: 1362px) 45vw, 600px\" \/><\/a><figcaption id=\"caption-attachment-20073\" class=\"wp-caption-text\">Run PowerShell task.<\/figcaption><\/figure>\n<p style=\"padding-left: 40px;\">Click OK button to close Overrides window<\/p>\n<p style=\"padding-left: 40px;\">Click OK to run task<\/p>\n<p style=\"padding-left: 40px;\">View task output<\/p>\n<p style=\"padding-left: 80px;\">PS C:\\Users\\admin&gt; Get-ChildItem Cert:\\LocalMachine\\Root | ? { ( $_.Subject -like &#8220;*GlobalSign*&#8221; ) -OR ( $_.Issuer<\/p>\n<p style=\"padding-left: 80px;\">like &#8220;*GlobalSign*&#8221; ) } | fl Subject,Issuer<\/p>\n<p>&nbsp;<\/p>\n<p style=\"padding-left: 80px;\">Subject : CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE<\/p>\n<p style=\"padding-left: 80px;\">Issuer\u00a0 : CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE<\/p>\n<p style=\"padding-left: 80px;\">Subject : CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA &#8211; R2<\/p>\n<p style=\"padding-left: 80px;\">Issuer\u00a0 : CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA &#8211; R2<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>Once task completes, go back to the Certificates state view &gt; highlight the certificate &gt; Click the Rediscover Certificates task<\/p>\n<figure id=\"attachment_20069\" aria-describedby=\"caption-attachment-20069\" style=\"width: 1362px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/PKICertificatesStateView.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-20069\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/PKICertificatesStateView.jpg\" alt=\"SCOM PKI Certificate state view\" width=\"1362\" height=\"472\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/PKICertificatesStateView.jpg 1362w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/PKICertificatesStateView-1200x416.jpg 1200w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/PKICertificatesStateView-300x104.jpg 300w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/PKICertificatesStateView-768x266.jpg 768w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/PKICertificatesStateView-1024x355.jpg 1024w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 1362px) 62vw, 840px\" \/><\/a><figcaption id=\"caption-attachment-20069\" class=\"wp-caption-text\">SCOM PKI Certificate state view<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h3>Delete PKI certificates<\/h3>\n<p>After identifying correct certificate and folder in question that requires deletion:<\/p>\n<ol>\n<li style=\"list-style-type: none;\">\n<ol>\n<li>Verify backup of certificate<\/li>\n<li>Test delete via PowerShell window from SCOM<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<p>Get-ChildItem Cert:\\LocalMachine\\AuthRoot | ? { ( $_.Subject -like &#8220;*GlobalSign*&#8221; ) -OR ( $_.Isser -like &#8220;*GlobalSign*&#8221; ) } | <span style=\"color: #ff0000;\">Remove-Item -DeleteKey<\/span><\/p>\n<ol>\n<li>Verify Task output shows certificate deleted<\/li>\n<li>Refresh MMC GUI &gt; Certificates plug in, and folder to verify certificate deleted<\/li>\n<li>Go back to SCOM Console Monitoring Tab<\/li>\n<li>Expand PKI folder<\/li>\n<li>Expand Certificates and CRLs folder<\/li>\n<li>Click on Certificates \u2013 Expired state view<\/li>\n<li>In Tasks pane on right, click on Rediscover certificates task, Click OK to run<\/li>\n<li>Open Health Explorer and reset monitor to clear alert<\/li>\n<\/ol>\n<p>Alternatively, leverage PowerShell reset logic on SCOM MS, use <a href=\"https:\/\/kevinjustin.com\/blog\/2023\/02\/01\/scom-monitor-reset-logic\/\" target=\"_blank\" rel=\"noopener\">blog<\/a><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h4>Documentation<\/h4>\n<p>SCOM Certificate monitoring TechCommunity blog <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/system-center-blog\/scom-management-pack-for-certificate-monitoring\/ba-p\/3619299\" target=\"_blank\" rel=\"noopener\">https:\/\/techcommunity.microsoft.com\/t5\/system-center-blog\/scom-management-pack-for-certificate-monitoring\/ba-p\/3619299<\/a><\/p>\n<p>Download SCOM Certificate monitoring pack <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=104858\" target=\"_blank\" rel=\"noopener\">https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=104858<\/a><\/p>\n<p>Long-standing PKI certificate pack and blog <a href=\"https:\/\/blog.topqore.com\/new-version-pki-certificates-monitoring-pack-for-scom\/\" target=\"_blank\" rel=\"noopener\">https:\/\/blog.topqore.com\/new-version-pki-certificates-monitoring-pack-for-scom\/<\/a><\/p>\n<p>Identify certificate stores to windows folders <a href=\"https:\/\/superuser.com\/questions\/217719\/what-are-the-windows-system-certificate-stores\" target=\"_blank\" rel=\"noopener\">https:\/\/superuser.com\/questions\/217719\/what-are-the-windows-system-certificate-stores<\/a><\/p>\n<p>STIG finding V-69223 <a href=\"https:\/\/www.stigviewer.com\/stig\/zos_tss\/2016-06-30\/finding\/V-69223\" target=\"_blank\" rel=\"noopener\">https:\/\/www.stigviewer.com\/stig\/zos_tss\/2016-06-30\/finding\/V-69223<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp; Man, I wish I had a few of these certificates in my PKI infrastructure (portfolio)!\u00a0 Ever need to identify an expired certificate, and or delete the certificate?\u00a0 Depending on UAC, AppLocker, and other settings, the delete portion may require server logon. &nbsp; &nbsp; Identify an expired certificate Few ways to identify an expired certificate &hellip; <a href=\"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Delete PKI certificates&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,5,545,530,11,742],"tags":[86,821,822,767,820,310,824,823],"class_list":["post-20061","post","type-post","status-publish","format-standard","hentry","category-administration","category-best-practice","category-powershell","category-scom","category-troubleshooting","category-windows","tag-certificate","tag-expired","tag-identify","tag-pki","tag-pki-certificate","tag-powershell","tag-run-powershell-from-console","tag-troubleshoot"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Delete PKI certificates - Kevin Justin&#039;s Blog<\/title>\n<meta name=\"description\" content=\"Use monitoring tools to identify expired PKI certificates from via PowerShell commands, including folder decoder ring!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Delete PKI certificates - Kevin Justin&#039;s Blog\" \/>\n<meta property=\"og:description\" content=\"Use monitoring tools to identify expired PKI certificates from via PowerShell commands, including folder decoder ring!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/\" \/>\n<meta property=\"og:site_name\" content=\"Kevin Justin&#039;s Blog\" \/>\n<meta property=\"article:published_time\" content=\"2023-09-28T15:25:41+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-12-04T18:24:34+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/FedReserveBondCertificate.jpg\" \/>\n<meta name=\"author\" content=\"WordPress Administrator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"WordPress Administrator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/09\\\/28\\\/delete-pki-certificates\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/09\\\/28\\\/delete-pki-certificates\\\/\"},\"author\":{\"name\":\"WordPress Administrator\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"headline\":\"Delete PKI certificates\",\"datePublished\":\"2023-09-28T15:25:41+00:00\",\"dateModified\":\"2023-12-04T18:24:34+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/09\\\/28\\\/delete-pki-certificates\\\/\"},\"wordCount\":686,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/09\\\/28\\\/delete-pki-certificates\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/09\\\/FedReserveBondCertificate.jpg\",\"keywords\":[\"certificate\",\"expired\",\"identify\",\"PKI\",\"PKI certificate\",\"powershell\",\"run PowerShell from console\",\"troubleshoot\"],\"articleSection\":[\"Administration\",\"Best Practice\",\"PowerShell\",\"SCOM\",\"Troubleshooting\",\"Windows\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/09\\\/28\\\/delete-pki-certificates\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/09\\\/28\\\/delete-pki-certificates\\\/\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/09\\\/28\\\/delete-pki-certificates\\\/\",\"name\":\"Delete PKI certificates - Kevin Justin&#039;s Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/09\\\/28\\\/delete-pki-certificates\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/09\\\/28\\\/delete-pki-certificates\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/09\\\/FedReserveBondCertificate.jpg\",\"datePublished\":\"2023-09-28T15:25:41+00:00\",\"dateModified\":\"2023-12-04T18:24:34+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"description\":\"Use monitoring tools to identify expired PKI certificates from via PowerShell commands, including folder decoder ring!\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/09\\\/28\\\/delete-pki-certificates\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/09\\\/28\\\/delete-pki-certificates\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/09\\\/28\\\/delete-pki-certificates\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/09\\\/FedReserveBondCertificate.jpg\",\"contentUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/09\\\/FedReserveBondCertificate.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/09\\\/28\\\/delete-pki-certificates\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Delete PKI certificates\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\",\"name\":\"Kevin Justin&#039;s Blog\",\"description\":\"Operational monitoring tools including System Center, Azure Monitor\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\",\"name\":\"WordPress Administrator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"caption\":\"WordPress Administrator\"},\"sameAs\":[\"https:\\\/\\\/kevinjustin.com\"],\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/author\\\/wordpress_admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Delete PKI certificates - Kevin Justin&#039;s Blog","description":"Use monitoring tools to identify expired PKI certificates from via PowerShell commands, including folder decoder ring!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/","og_locale":"en_US","og_type":"article","og_title":"Delete PKI certificates - Kevin Justin&#039;s Blog","og_description":"Use monitoring tools to identify expired PKI certificates from via PowerShell commands, including folder decoder ring!","og_url":"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/","og_site_name":"Kevin Justin&#039;s Blog","article_published_time":"2023-09-28T15:25:41+00:00","article_modified_time":"2023-12-04T18:24:34+00:00","og_image":[{"url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/FedReserveBondCertificate.jpg","type":"","width":"","height":""}],"author":"WordPress Administrator","twitter_card":"summary_large_image","twitter_misc":{"Written by":"WordPress Administrator","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/#article","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/"},"author":{"name":"WordPress Administrator","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"headline":"Delete PKI certificates","datePublished":"2023-09-28T15:25:41+00:00","dateModified":"2023-12-04T18:24:34+00:00","mainEntityOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/"},"wordCount":686,"commentCount":0,"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/FedReserveBondCertificate.jpg","keywords":["certificate","expired","identify","PKI","PKI certificate","powershell","run PowerShell from console","troubleshoot"],"articleSection":["Administration","Best Practice","PowerShell","SCOM","Troubleshooting","Windows"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/","url":"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/","name":"Delete PKI certificates - Kevin Justin&#039;s Blog","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/#primaryimage"},"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/FedReserveBondCertificate.jpg","datePublished":"2023-09-28T15:25:41+00:00","dateModified":"2023-12-04T18:24:34+00:00","author":{"@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"description":"Use monitoring tools to identify expired PKI certificates from via PowerShell commands, including folder decoder ring!","breadcrumb":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/#primaryimage","url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/FedReserveBondCertificate.jpg","contentUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/09\/FedReserveBondCertificate.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/kevinjustin.com\/blog\/2023\/09\/28\/delete-pki-certificates\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kevinjustin.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Delete PKI certificates"}]},{"@type":"WebSite","@id":"https:\/\/kevinjustin.com\/blog\/#website","url":"https:\/\/kevinjustin.com\/blog\/","name":"Kevin Justin&#039;s Blog","description":"Operational monitoring tools including System Center, Azure Monitor","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kevinjustin.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508","name":"WordPress Administrator","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","caption":"WordPress Administrator"},"sameAs":["https:\/\/kevinjustin.com"],"url":"https:\/\/kevinjustin.com\/blog\/author\/wordpress_admin\/"}]}},"_links":{"self":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/20061","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/comments?post=20061"}],"version-history":[{"count":11,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/20061\/revisions"}],"predecessor-version":[{"id":20126,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/20061\/revisions\/20126"}],"wp:attachment":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/media?parent=20061"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/categories?post=20061"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/tags?post=20061"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}