Export certificate from IIS using PowerShell

Question

How do I export a self-signed certificate from IIS 7 using PowerShell?

Answer 1

dir cert:\localmachine\my | Where-Object { $_.hasPrivateKey } |   Foreach-Object { [system.IO.file]::WriteAllBytes("c:\$($_.Subject).pfx",     ($_.Export('PFX', 'secret')) ) }

Source: Exporting Certificate With Private Key

This will export all of your certificates into C:\.

You can check what certificates you have by running:

dir cert:\localmachine\my

Answer 2

Worth noting that when I tried to export my root certificates, I had to use Thumbprint as the filename, not Subject, due to invalid foreign-language characters in the unicode. This works:

dir cert:\localmachine\root |
Foreach-Object { [system.IO.file]::WriteAllBytes("c:\temp\$($_.Thumbprint).cer",     ($_.Export('CERT', 'secret')) ) }