Certify

Certify is a C# tool for enumerating and abusing misconfigurations in Active Directory Certificate Services (AD CS). It can inspect certificate authorities, templates, and PKI objects and supports certificate-request workflows. The command documented here is read-only PKI-object enumeration; the tool's other capabilities require separate authorization and review.