# Enumeration - Certificate Authority

## Windows

### Native 

{% tabs %}
{% tab title="AD Module" %}
{% code overflow="wrap" %}

```powershell
# AD Module
Get-ADObject -Filter * -SearchBase 'CN=Certification Authorities,CN=Public Key Services,CN=Services,CN=Configuration,DC=security,DC=local'

Get-ADObject -LDAPFilter '(objectclass=certificationAuthority)' -SearchBase 'CN=Configuration,DC=security,DC=local' | fl *
```

{% endcode %}
{% endtab %}

{% tab title="ADSI" %}

```powershell
# Get-CertificationAuthority -SearchBase LDAP://CN=Configuration,DC=security,DC=local

function Get-CertificationAuthority {
    param([string]$searchBase = "LDAP://CN=Configuration,DC=security,DC=local")
    
    $directorySearcher = New-Object System.DirectoryServices.DirectorySearcher
    $directorySearcher.SearchRoot = New-Object System.DirectoryServices.DirectoryEntry($searchBase)
    $directorySearcher.Filter = "(objectclass=certificationAuthority)"
    $directorySearcher.PropertiesToLoad.Add("*") > $null
    
    try {
        $results = $directorySearcher.FindAll()
        foreach ($result in $results) {
            $properties = @{}
            foreach ($prop in $result.Properties.PropertyNames) {
                $properties[$prop] = $result.Properties[$prop][0]
            }
            
            $outputObj = New-Object PSObject -Property $properties
            Write-Output $outputObj
        }
    }
    catch {}
    finally {
        $results.Dispose()
    }
}
```

{% endtab %}
{% endtabs %}

### Certify

Github: <https://github.com/GhostPack/Certify>

```powershell
Certify.exe cas 
Invoke-Certify cas
```

<figure><img src="https://1600278159-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MFlgUPYI8q83vG2IJpI%2Fuploads%2FQyg3YdfCBtmYjxuY6yfr%2Fimage.png?alt=media&#x26;token=a7de3308-9c3e-450f-a403-7ae786a80e4c" alt=""><figcaption></figcaption></figure>

## Linux

### Certipy

Github: <https://github.com/ly4k/Certipy>

```python
certipy find -u <user> -p <password> -dc-ip 10.10.10.100 -stdout
```

<figure><img src="https://1600278159-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MFlgUPYI8q83vG2IJpI%2Fuploads%2F0mLYViysWF4X1ZjGgmLx%2Fimage.png?alt=media&#x26;token=ce781cb4-8516-4aba-b905-28aed2aaf00c" alt=""><figcaption></figcaption></figure>