Hello, Thankyou for using the Microsoft Q&A forums. You can go to your Domain Controller and find the Cert Publishers group in Active Directory. It should have your servers with the Certificate Authority role. If you run the Certutil cmd there, you can get the info of the certificates installed.Hope it helps.
See AlsoCSR Creation & SSL Certificate InstallationView the IIS CertificateSSL Configuration in IIS 5/6Ask ISODaniel Alejandro Rivera Dominguez 415Reputation points • Microsoft Vendor
2024-03-01T09:05:33.51+00:00 If you run "certutil -getreg ca\CAType" you can see what type of CA you have:
Values 1 and 4 are Enterprise subordinate and Standalone subordinate.Values 0 and 3 are Enterprise root CA and Standalone root CA. 5 means it's unknown.
Example:
You can also find the value by going into the registry to Computer\HKLM\System\CurrentControlSet\Services\CertSvc and checking the key "CAType"
AnnaG 156Reputation points
2024-03-01T12:36:26.9033333+00:00 his was a bit of a challenge to find online. Maybe it was just me so thank you.
Appreciate it
Sign in to comment
