delete all expired certificates

[OnMyWay]

Hi,
I need help with code to delete expired certificates in windows xp, and windows 7.
Due to the global expiration of let's encrypt in 2021 old computers that have not been updated will not be able to access the internet.
I found the command to import the new certificate, but not to delete the expired certificate!

[Subz]

I've always used CertUtil to add/update/remove certificates.

[rudi]

This is a task I would solve using powershell:

 

within an administrative powershell first list all expired certificates and check, if you will be fine to delte them all:

gci cert: -r |?{($($_.notafter) -lt $(get-date)) -and ($_.psiscontainer -eq $False)} | sort notafter -desc | ft notafter,subject

 

then delete them: (to do so "run as Admin" is required)

gci cert: -r |?{($($_.notafter) -lt $(get-date)) -and ($_.psiscontainer -eq $False)} | sort notafter -desc | remove-item -ea si

 

Regards, Rudi.