COMMAND EVERYTHING.

Get-Certificate

Submits a certificate request to an enrollment server and installs the response or retrieves a certificate for a previously submitted request.

Networking / Security · Risk: Low · Documentation Verified

Last verified: 2026-10-26

Microsoft pki reference: Submits a certificate request to an enrollment server and installs the response or retrieves a certificate for a previously submitted request. The syntax and selected example below are adapted from the pinned Windows Server 2025 reference. Module availability, target configuration and delegated permissions determine whether it can run in your environment. Documentation and parameter text: Microsoft, CC BY 4.0; formatting adapted by Cmdlet World. No execution testing is claimed.

Get-Certificate [-Url <Uri>] -Template <String> [-SubjectName <String>]
 [-DnsName <String[]>] [-Credential <PkiCredential>] [-CertStoreLocation <String>]
 [-WhatIf] [-Confirm] [<CommonParameters>]

Copied 0 times

Required permissions

Use an account with the target resource permissions documented for Get-Certificate. Modifying administrative cmdlets may require elevation or delegated administration. This catalog does not assert that ordinary users can execute the command.

Supported environments

Windows / pki · Windows Server 2025 documentation; feature/module prerequisites apply

Parameters

-CertStoreLocation: Specifies the path to the certificate store for the received certificate. If the request is made pending, then the request object is saved in the corresponding request store. > [!NOTE] > Only My store is supported.
-Confirm: Prompts you for confirmation before running the cmdlet.
-Credential: Specifies the credential to use for certificate enrollment. The credential can be a user name and password (a credential object), an X509 certificate, or the path to a certificate. If a credential is not specified, then Kerberos authentication is used.
-DnsName: Specifies one or more DNS names to be included in the certificate request as subject alternative name extension.
-Request (required): Specifies the X509 certificate or the path to a requested certificate located in the request store.
-SubjectName: Specifies the subject name to be included in the certificate request.
-Template (required): Specifies the object identifier or name of a certificate template to use with the certificate request.
-Url: Specifies the policy server URL to use for certificate enrollment. Credentials are required if the endpoint requires a user name and password or certificate authentication from the client. If credentials are not found and Windows PowerShell is in interactive mode, then a prompt for credentials will appear.
-WhatIf: Shows what would happen if the cmdlet runs. The cmdlet is not run.

Prerequisites

Windows with the pki module and the Windows feature or management tools that provide it. Confirm target connectivity and version compatibility using the linked Microsoft reference.

Security considerations

This is a read-oriented cmdlet; protect any sensitive results and check the documented effects of your selected parameters.

Examples

EXAMPLE 1

Get-Certificate @params

This example submits a certificate request for the SslWebServer template to the specific URL using the user name and password credentials. The request will have two DNS names in it. This is for a certificate in the machine store. If the request is issued, then the returned certificate is installed in the machine My store and the certificate in the EnrollmentResult structure is returned with the status Issued. If the request is made pending, then the request is installed in the machine REQUEST store and the request in the EnrollmentResult structure is returned with the status Pending. Source: Microsoft, CC BY 4.0; transcript prompt/output removed. This example was not executed.

Sources

https://github.com/MicrosoftDocs/windows-powershell-docs/blob/b7645dd8c687139b28e845119da30ec670526507/docset/winserver2025-ps/pki/Get-Certificate.md

https://learn.microsoft.com/powershell/module/pki/get-certificate?view=windowsserver2025-ps

Personal collections

Explain or customize this command with AI

Related commands

Get-NetIPInterface

Add-MpPreference

Get-MpPerformanceReport

Add-DhcpServerInDC