Microsoft "certutil -delstore" Command Options

Q

How can I use Microsoft "certutil -delstore" command? What are command options supported by "certutil -delstore"? The document says "Delete certificate from store".

✍: FYIcenter.com

A

Microsoft "certutil -delstore" command can be used to delete a certificate from a certificate store on the local computer.

Here are options supported by the "certutil -delstore" command:

C:\fyicenter>\windows\system32\certutil -delstore -?

Usage:
  CertUtil [Options] -delstore CertificateStoreName CertId
  Delete certificate from store
    CertificateStoreName -- Certificate store name.  See -store.
    CertId -- Certificate or CRL match token.  See -store.
      a serial number,
      an SHA-1 certificate, CRL, CTL or public key hash,
      a numeric cert index (0, 1, etc.),
      a numeric CRL index (.0, .1, etc.),
      a numeric CTL index (..0, ..1, etc.),
      a public key, signature or extension ObjectId,
      a certificate subject Common Name,
      an e-mail address, UPN or DNS name,
      ...

Options:
  -enterprise  -- Use local machine Enterprise registry certificate store
  -user        -- Use HKEY_CURRENT_USER keys or certificate store
  -GroupPolicy -- Use Group Policy certificate store
  -gmt         -- Display times as GMT
  -seconds     -- Display times with seconds and milliseconds
  -v           -- Verbose operation
  -privatekey  -- Display password and private key data
  -dc DCName   -- Target a specific Domain Controller

2013-03-05, 12290👍, 0💬