Cyber Security

PowerShell: Alert me when Certificates expires soon

An expired certificate is a nuisance. In the case of web servers, this is indicated by the display of an untrusted connection when a user tries to open the web page. We will change this together in this article and make sure that we find certificates that will expire soon.

The Goal

In short, I will provide a few lines of code that retrieves all certificates from all domain-joined server that will expire in less or equal 30 days.

The result is an output which shows the server name, the certificate and the expiration date.


The Code

The following code retrieves all Windows server by name. Then a remote connection is established to retrieve all certificates that will expire in less or equal 30 days. All information is collected in an object and the output will be shown in the console window.

$servers=(Get-ADComputer -Filter {operatingsystem -like '*server*'}).Name


foreach ($i in $servers)



$a=Invoke-Command -ComputerName $i {Get-ChildItem Cert:\LocalMachine\My -Recurse |
Where-Object {$_ -is [System.Security.Cryptography.X509Certificates.X509Certificate2] -and $_.NotAfter -gt (Get-Date) -and $_.NotAfter -lt (Get-Date).AddDays(30)}


foreach ($c in $a) {

$result+=New-Object -TypeName PSObject -Property ([ordered]@{




Write-Output $result

Run this code in PowerShell ISE to test the functionality in your environment.

I also recommend to put the code into a scheduled task. This scheduled task should run regularly. Instead of writing the output to console you could send an E-Mail message.

If that’s the way you want it, just follow my article PowerShell: Alert me when Disk Space is running low on my Windows Servers (E-Mail Notification) where you can find a template for configuring E-Mail notification and creating a scheduled task.

See you next time with PowerShell and automation …

13 replies »

  1. Hi Patrick,

    Is there a way to specify a specific server and a specific SSL cert on said server, as opposed to all servers and all certs?


  2. Hello Patrick,

    Thank you for providing this script.

    Can you ask how you can also get this script to email out the results?

    Is that something that needs to be written in to the script you provided?


  3. Hello,

    I love your script, great work. I followed your guide to setup email notifications for this script, however I’m having issues printing it in the body. I’ve searched around, and I guess you can’t put PS Objects directly into the body of an email.

    How would replicate the neat format of “Write-Output $result” in an email body?

    Thank you!
    Nick W.


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.