New Post: Exclude autoenroll certificates

I know you can check the enrollment flags using CertUtil, and then filter out "0x20" (or CT_FLAG_AUTO_ENROLLMENT) ... is there not some way to update the PSPKI modele to explose more of the certifcate / CA schema ? Are there any plans to ?

I would LOVE to have more granular control over my scripts by being able to work with more properties/noteproperties of the certificates.

Thanks !