DC Certificate Template Enumeration

dc_cert_template.ps1

$Results = ([adsisearcher]"(&(objectCategory=computer)(userAccountControl:1.2.840.113556.1.4.803:=8192))").FindAll() | % {
    $Entry = $_.GetDirectoryEntry()

    $SAM = $Entry.samAccountName[0]
    $DN = $Entry.distinguishedName[0]

    try {
        $Cert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2 @($Entry.userCertificate)
        $Exp = $Cert.GetExpirationDateString()

        $TemplateExt = $Cert.Extensions | Where-Object{ ( $_.Oid.FriendlyName -eq 'Certificate Template Name') } | Select-Object -First 1

        [pscustomobject] @{
            'SamAccountName'=$SAM
            'DistinguishedName'=$DN
            'Thumprint'=$Cert.Thumbprint
            'Expiration'=$Cert.GetExpirationDateString()
            'TemplateName'=$TemplateExt.Format(1) 
        }
    }
    catch {
        Write-Warning "Error retrieving the certificate from DC '$DN' !"
    }
}

$Results | fl