iis - 如何将 IIS 证书列表导出为详细列表？

Question

我希望将安装在我的 IIS 上的证书列表导出到一个详细列表(名称、域、到期日期等)到一个列表中。

我希望将它上传到我的日历中，以便我知道何时更新它们。

Answer 1

我找到了一个可以执行此操作的 powrshell 脚本。我使用 notepadd++ 查找和替换命令从中制作出正确的 CSV。

# Get all certs in MY store of Local Machine profile
 $store = New-Object System.Security.Cryptography.X509Certificates.X509Store("My","LocalMachine")
 $store.Open("ReadOnly")
 $store.Certificates | 
 % { 
 # Get all extensions for one cert
 $cert = $_
 $cert.Extensions | 
 % { 
 # Find "Enhanced Key Usage" extension
 $extension = $_
 If ($extension.Oid.FriendlyName -eq "Enhanced Key Usage")
 {
 # Get all enhanced key usages for the cert
 $enhancedKeyUsageExtension = [System.Security.Cryptography.X509Certificates.X509EnhancedKeyUsageExtension]$extension
 $enhancedKeyUsageExtension.EnhancedKeyUsages | 
 % { 
 # Find "Server Authentication" enhanced key usage
 $enhancedKeyUsage = $_
 If ($enhancedKeyUsage.FriendlyName -eq "Server Authentication") 
 {
 # We found a cert that will get listed in Server Certificates list in IIS Manager. Show its info 
 $cert | Select Subject, Issuer, NotBefore, NotAfter, Thumbprint, SerialNumber
 } 
 }
 } 
 }
 }
 $store.Close()

您可以从 power shell 命令行在 ps1 文件中运行它，并将结果保存到文件中。是这样的:.\getSSL.ps1 |输出文件 myfile.txt