Get-ADCertificateAuthority.ps1

Get-ADCertificateAuthority.ps1

$ConfigurationDN = $([ADSI]"LDAP://RootDSE").ConfigurationNamingContext;
$SearchRoot = "LDAP://CN=Enrollment Services,CN=Public Key Services,CN=Services,$ConfigurationDN"
$SearchFilter = "(objectCategory=pkiEnrollmentService)"

foreach($CAEnrollService in (New-Object adsiSearcher([ADSI]$SearchRoot,$SearchFilter)).FindAll()){
  $serviceProperties = [ordered]@{}
  foreach($propName in 'Name CN DnsHostName'.Split()){
    $serviceProperties[$propName] = $CAEnrollService.Properties[$propName] |Select -First 1
  }

  [pscustomobject]$serviceProperties
}