

The in parallel is because it's 100+ servers. I would love to run native ps as it is cleaner and not dependent on an app being installed. My clients have ps 5.1 and my servers are ps 2. Main reason for certutil is compatibility.Turning legitimate admin tools against their normal behavior is not just a theoretical technique but is actively exploited in the wild. CertUtil is a perfect example of a tool that is a legitimate OS program yet has extra abilities that can be used for purposes other than just dealing with certificates.The following command displays the part of the certificate file that begins with -BEGIN CERTIFICATE- and ends with -END CERTIFICATE. 5.2.4 Displaying certificate contents (certutil cert command) This subsection explains how to display the contents of a certificate file.The source for the NSS Security Tools can be downloaded from Mozilla at the link given below and compiled by following the instructions in Step 6 below. This is not the same certutil tool that is included with Windows.

Certutil is part of the NSS Security Tools from Mozilla that will allow the new certificate to be imported into the cert8.db file.
