Export certiticate file by PS

Question

Hi, good morning!

I have a list of 900 certificates in the Certification Authority (folder Issued Certificates). I would like to export each certificate in Base-64 X.509 by script in Power Shell, because in the GUI, I need to do one by one.

I have tried many commands and scripts to do this. All processes show me success, but when I try to open the certificate file, it shows me a message:

Invalid Public Key Object File

• Thefile is invalid to use the following Security Certificate. Could you support me? Thank in advance

Answer 1

Hi @Oliveira Junior, Jose Ramos (SMO TK RYD SIG) ,

maybe this helps to get started (haven't tested the script because no CA available at the moment):

Import-Module ADCSAdministration
$caName = "Name of CA"
$outputDir = "C:\Certificates"
$caObj = Get-CertificationAuthority -Name $caName
$certs = Get-IssuedRequest -CertificationAuthority $caObj
foreach ($cert in $certs) {
    $certObj = Get-Certificate -CertId $($cert.RequestID) -CertAuthority $caObj
    [System.IO.File]::WriteAllText($("$outputDir\Cert_$certId.cer"), $certObj.RawData | Convert.ToBase64String)
}

---

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards

Andreas Baumgarten

Answer 2

I used this script, and it is working! Thank for all

## Converting PEM String into X509Certificate2 object$rawCertificate = ($pemCertificate -split '\r\n' | Select-Object -Skip 1 | Select-Object -SkipLast 2) -join ''$newCertificate = System.Security.Cryptography.X509Certificates.X509Certificate2.