So....
How to delete archived certificates that are stored on my certificate store using the certutil command?
How do you do it if you REALLY want to?
Here is the PowerShell code to remove expired and archived certificates from the "My" store:
(Thanks to Brian Wilson for helping me with the code!)
$store = New-Object
System.Security.Cryptography.X509Certificates.X509Store "My","CurrentUser"
$MaxAllowedIncludeArchive = ([System.Security.Cryptography.X509Certificates.openflags]::MaxAllowed –bor [System.Security.Cryptography.X509Certificates.openflags]::IncludeArchived)
$store.Open($MaxAllowedIncludeArchive)
[System.Security.Cryptography.X509Certificates.X509Certificate2Collection] $certificates = $store.certificates
foreach ($cert in $certificates)
{
Write-Host "Analyzing: " -NoNewline; Write-Host $cert.IssuerName -NoNewline; Write-Host $cert.NotAfter -NoNewline; Write-Host $cert.Archived -NoNewline
if (($cert.notAfter -lt (Get-Date)) -or ($cert.Archived))
{
Write-Host " :Removing"-NoNewline
$store.Remove($cert)
}
Write-Host
}
$store.Close()
