PKI - IssuingCA: How to clean Revoked Certificates?!

Question

Hi all,

I need to know if it is possible to automatically reduce the REVOKED CERTIFICATES list, I would like to delete very old certificates (records) and lighten the Database.

Is it also possible to use a tool or powershell to query the database to create reports?

Thanksfor your support and regards,

Alessio.

Answer 1

This may help you... https://social.technet.microsoft.com/Forums/office/en-US/334dce20-b604-441e-8747-2a3d2a4e0263/deleting-revoked-certificates?forum=winserversecurity. For the report, you could just use the cert. Authority management console and export each folders by right click on the folder and select export list. https://learn.microsoft.com/en-us/answers/questions/309964/export-of-issued-certificates-from-ca