Microsoft Knowledge Base Article
This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved.
Terms
of Use |
Trademarks
Article ID: 2233022 - Last Review: June 24, 2010 - Revision: 9.0
"Certutil -view" command does not return issued certificates correctly
The Certutil command-line tool can be used to display the certificates that have been issued by a certification authority using theÂ
-view parameter. Under some circumstances, Certutil may not display all the expected certificates.Â
For example the following command would not return the expected number of certificates:
certutil -view –restrict "RequesterName=contoso\twt"
Output would be similar to the following:
Maximum Row Index: 0
0 Rows
  0 Row Properties, Total Size = 0, Max Size = 0, Ave Size = 0
  0 Request Attributes, Total Size = 0, Max Size = 0, Ave Size = 0
  0 Certificate Extensions, Total Size = 0, Max Size = 0, Ave Size = 0
  0 Total Fields, Total Size = 0, Max Size = 0, Ave Size = 0
CertUtil: -view command completed successfully.
This issue is a result of how Certutil handles parsing for the
–view parameter. Specifically, there is an issue with how it parses the following escape characters:
\n,
\r and
\t.
The workaround is to uppercase all requester name strings passed as restrictions on the Certutil command line.
For example, instead of using this command:
certutil -view –restrict "RequesterName=contoso\twt"
Use this command:
certutil -view –restrict "RequesterName=contoso\TWT"
Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See
Terms of Use
(http://go.microsoft.com/fwlink/?LinkId=151500)
for other considerations.
APPLIES TO
- Windows Server 2008 Enterprise
- Windows Server 2008 Standard
- Windows Server 2008 R2 Enterprise
- Windows Server 2008 R2 Standard
Community Feedback System
Very often, it takes hours to solve a problem. Very often, you've looked high
and low, and have tried a lot of solutions. When you finally found it, chances
are, it was because someone else helped you. Here's your chance to give back.
Use our community feedback tool to let others know what worked for you and what
didn't.
Please also understand that the community feedback system is not warranted to be
correct, it's simply a system that we've built to let people try and help each
other. If something in a feedback response doesn't make sense to you, or you're
not comfortable making changes that the feedback talks about (like registry
edits), please consult a professional.
Thank you for using kbAlertz.com Feedback System.
-- Scott Cate