CODEWITHSUNDEEP
powershellcertificateiis-7.5ssl-certificatepowershell-2.0
colo_joe
colo_joe

Reputation: 119

How can I use PowerShell to find a website's certificate?

I am trying to use PowerShell to query a website and see what SSL certificate (name) it is using for HTTPS bindings. Then I would like to trace back to see what CA issued the cert.

I am having trouble querying the website to find out what SSL certificate is bound. The IIS 7.5 GUI shows a friendly name.

After I get the websites SSL certificate the plan is to use PowerShell to search the Certificate stores by FriendlyName (or thumbprint, or some other value).

Here is what I have so far:

I'm not sure where this information is stored, and I have no luck searching for it with PowerShell, in the web.config and applicationhost.config. Google searching has not been helpful so far.

Any info, links to information, or documentation on how certs are handled / stored in IIS is appreciated.

Upvotes: 1

Views: 15294

Answers (1)

Andy Arismendi
Andy Arismendi

Reputation: 52567

To get the site SSL binding check out: IIS:\SslBinding

You can get the binding port like this:

dir IIS:\SslBindings | ? {$_.Port -eq 1443} | Select *

The Thumbprint and Store properties will be of interest.

You can get the actual cert using:

get-item cert:\LocalMachine\$theStore\$theThumbprint

e.g.

get-item cert:\LocalMachine\My\29F025A78F537D931A8CF05B00EB81DB84160CF3 | select *

Upvotes: 8

Related Questions