In this second post I explain how to query or delete certificate entries from a MS CA DB. For this I wrote a PowerShell script with 4 functions. I don’t use any modules!
The only “tool” I use is the certutil.exe.
The complete script is available in this post!

When you are running a Microsoft CA / PKI infrastructure, there are a few maintenance tasks like cleaning up expired or failed certificates from the database and then shrinking your DB at the end to “cleanup” the whitespace.
This article shows you , how to do this by using my powershell script “Cleanup_MSPKI_Cert_v1.1.ps1”.