[其他] CertMgr - 证书添加/删除/查看...

tmplinshi

http://pan.baidu.com/share/link?shareid=4260402654&uk=1124163200

Usage: CertMgr [options][-s [-r <location>][SourceStoreName]
                        [-s [-r <location>][DestinationStoreName]
Options:
-add               Add certificates/CRLs/CTLs to a storeFile or a system store
-del               Delete certificates/CRLs/CTLs from a storeFile or
                    a system store
-put               Put an encoded certificate/CRL/CTL from a storeFile or
                    a system store to a file.  The file will be saved in X.509
                    format. -7 can be used to save the file in PKCS#7 format
-s                 Indicate the store is a system store
-r    <location>   The system store location
                        <currentUser|localMachine> Default to 'currentUser'
-c                 Certificates in the store
-crl               Certificates revocation lists(CRLs) in the store
-ctl               Certificates trust lists(CTLs) in the store
-v                 Verbose display of the certificates/CRLs/CTLs
-all               All certificates/CRLs/CTLs in the store
-n    <name>       Common name of the certificate
-sha1 <thumbPrint> The sha1 hash of the certificate/CRLs/CTLs
-7                 Save the destination store in PKCS# 7 format
-e    <encode>     Certificate/CRL/CTL encoding type.
                    Default to X509_ASN_ENCODING
-f    <flag>       CertStore open flags.  Meaningful only if -y is set
-y    <provider>   CertStore provider name

查看：

D:\Downloads>certmgr.exe -c "1.cer" ==============Certificate # 1 ========== Subject::   [0,0] 2.5.4.3 (CN) Tencent Technology(Shenzhen) Company Limited Issuer::   [0,0] 2.5.4.3 (CN) VeriSign Class 3 Code Signing 2004 CA SerialNumber::    F0 76 50 4B 5D 89 7F 8E 45 A0 E5 30 AF 9A A0 5F SHA1 Thumbprint::       8BC03049 00BA45E5 E3672A3A 47BDA1C8 B7ACF444 MD5 Thumbprint::       72C7406D B010B9F9 62A39BF1 6668A6AE NotBefore::   Mon Jun 20 14:45:00 2011 NotAfter::   Sun Jan 01 07:59:59 2040 ============================================== CertMgr Succeeded D:\Downloads>

添加：

certmgr.exe -add -c "1.cer" -s -r localMachine root
复制代码

删除：

certmgr.exe -del -c -n "Tencent Technology(Shenzhen) Company Limited" -s -r localMachine addressbook
复制代码

打开“证书”管理窗口（等同于“Internet 属性→内容→证书”）：

certmgr.exe
复制代码

DestinationStoreName 可以用下列名称：

addressbook - 其他人
AuthRoot
CA - 中级证书颁发机构
Disallowed
My
Root - 受信任的根证书颁发机构

==============================================

相关工具：

CertMig - cert 证书导入与导出工具
http://bathome.net/thread-12929-1-1.html

CerInstall - 最小化打开“证书导入向导”，然后自动点击按钮。
http://bathome.net/viewthread.ph ... muid=33065#pid83523