How to find certificates that are expiring on your server using PowerShell– Part 1

Like This Blog 2

Added by Jason Helmick January 14, 2013

So, I’m often asked how to quickly find certificates that are about to expire so that they can be replaced. Here is a quick way to list the days remaining before the certificates on your server are about to expire.

PS> Get-ChildItem -Path Cert:\LocalMachine\My | Select-Object -Property PSComputerName, Subject, @{n=’ExpireInDays’;e={($_.notafter – (Get-Date)).Days}}

By adding a Where-Object filter, you can filter the list so that only certificates that are going to expire in 90 days are displayed.

PS> Get-ChildItem -Path Cert:\LocalMachine\My | Select-Object -Property PSComputerName, Subject, @{n=’ExpireInDays’;e={($_.notafter – (Get-Date)).Days}} | Where-Object {$_.ExpireInDays -lt 90}

If you have multiple servers such as a web farm, you can use PowerShell Remoting to check all your servers at once! Check out the same one-liners using PowerShell remoting Locating IIS certificates before the expire.

Pretty cool huh?

For more, read Part 2: How to find certificates that are expiring on your server using PowerShell

Knowledge is PowerShell

Jason Helmick
Director of PowerShell Technologies
Interface Technical Training