Export-WindowsCertStoreToPEM

Export-WindowsCertStoreToPEM.ps1

# Get all certificates from the cert store
$certs = Get-ChildItem -Path "Cert:\CurrentUser\Root"

# Initialize an empty array to hold the PEM strings
$pemCerts = @()

# Loop over each certificate
foreach ($cert in $certs) {
    # Export the certificate as a PEM string
    $pem = [System.Convert]::ToBase64String($cert.Export([System.Security.Cryptography.X509Certificates.X509ContentType]::Cert))

    # Add the PEM string to the array
    $pemCerts += "# $($cert.Subject)"
    $pemCerts += "-----BEGIN CERTIFICATE-----`n$pem`n-----END CERTIFICATE-----"
}

# Join the PEM strings into a single string
$pemFileContent = $pemCerts -join "`n"

# Write the PEM file
Set-Content -Path "certs.pem" -Value $pemFileContent