Windows PKI and certificate authority audit toolkit — CA configuration, templates, issued certs, CRL, OCSP, and PKI health

Runs a comprehensive set of read-only checks on an Arc-enabled Windows Server 2012 / 2012 R2 machine where the latest ESU security update installs, reboots, then rolls back. It pinpoints WHICH of the known causes applies: * Missing / untrusted certificate in the license signing chain * Certificate chain present but REVOCATION cannot be che... More info

Fleet-wide, agentless watch over your internal PKI: expiring LDAPS/RDP/IIS/service certs, ADCS CA health, and CRL reachability - RMM-ready with clean exit codes. Includes multi-tenant fleet scanning, JSON snapshots, trend diffs and a self-contained HTML report.