$ 0 0 I was using version 2.6. The certificate server is running 2003 R2 Enterprise. I ended up using certutil which gives me the data I need, though in a slightly less clean manner in seconds.