Forum Discussion
Your AD script output looks like this, right?
8462810712BF2485184D869FCDDDFFF819DA968E##CN=WMSvc-SHA2-SMHSCCMDP02##CN=WMSvc-SHA2-SMHSCCMDP02CN=WMSvc-SHA2-SMHSCCMDP02####cert.issuer=CN=WMSvc-SHA2-SMHSCCMDP02&cert.friendlyname=WMSVC-SHA2&cert.serialnumber=119E3109F6A6579F4EF5C2264440C0FB&cert.thumbprint=8462810712BF2485184D869FCDDDFFF819DA968E
50622FEE334BDCF093AF24AB43B001ADDB140DE7##CN=UCLA Health AD Certificate Authority-CA1, DC=ad, DC=medctr, DC=ucla, DC=edu##CN=UCLA Health AD Certificate Authority-CA1, DC=ad, DC=medctr, DC=ucla, DC=edu####cert.issuer=CN=UCLA Health AD Certificate Authority-CA1, DC=ad, DC=medctr, DC=ucla, DC=edu&cert.friendlyname=SCCM Client Certificate&cert.serialnumber=7D0003F236C29A693E5FAEDD7400000003F236&cert.thumbprint=50622FEE334BDCF093AF24AB43B001ADDB140DE7
46CDFF1C76FC09882F258E238CAF3D7A53521D59##CN=UCLA Health AD Certificate Authority-CA1, DC=ad, DC=medctr, DC=ucla, DC=edu##CN=UCLA Health AD Certificate Authority-CA1, DC=ad, DC=medctr, DC=ucla, DC=edu####cert.issuer=CN=UCLA Health AD Certificate Authority-CA1, DC=ad, DC=medctr, DC=ucla, DC=edu&cert.friendlyname=SCCM Distribution Point Certificate&cert.serialnumber=7D00040E2C871287E9B8966B25000000040E2C&cert.thumbprint=46CDFF1C76FC09882F258E238CAF3D7A53521D59
215B79E278B3396EDC4973089E8A1EDE762FEF04##CN=UCLA Health AD Certificate Authority-CA1, DC=ad, DC=medctr, DC=ucla, DC=edu##CN=SMHSCCMDP02.ad.medctr.ucla.edu, CN=SMHSCCMDP02CN=UCLA Health AD Certificate Authority-CA1, DC=ad, DC=medctr, DC=ucla, DC=edu####cert.issuer=CN=UCLA Health AD Certificate Authority-CA1, DC=ad, DC=medctr, DC=ucla, DC=edu&cert.friendlyname=SCCM Web Server Certificate&cert.serialnumber=7D00042B72F1A357DC4B414ED7000000042B72&cert.thumbprint=215B79E278B3396EDC4973089E8A1EDE762FEF04
This output creates instance level properties that you should be able to see in the GUI when you navigate to that instance and look at the Info tab. In this case, you should see auto.cert.issuer, auto.cert.friendlyname, auto.cert.serialnumber, and auto.cert.thumbprint listed and populated. These are the properties I'm referring to (not the $properties variable you defined in the script).
You don't need more datapoints because the only numerical data you have for each cert is the number of days until expiration.
Related Content
- 6 months ago