Hi there, Are you really limited to CERTUTIL? PowerShell can do great things... see: https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.security/providers/remove-item-for-certificate?view=powershell-5.1 ... View more

Have you tried coding like: [ for left square bracket [ ] for right square bracket ] ... View more

Hi there, Are you really limited to CERTURIL? PowerShell can do great things, eg finding the Thumbprint with the CN: Get-ChildItem -path cert: -Recurse | where { $_.Subject -like "CN= *" } | Select Thumbprint OR: See this MS doc: Get-ChildItem -Path cert:\LocalMachine -DnsName *Fabrikam* | Remove-Item Description ----------- This command deletes all certificates that have a DNS name that contains "Fabrikam". It uses the DNSName parameter of the Get-ChildItem cmdlet to get the certificates and the Remove-Item cmdlet to delete them. Kind regards, Marc ... View more