I've never used that utility, but using certutil -store got me a list of all my certificates. Using WSHPipe ( http://www.kixtart.org/forums/ubbthreads.php?ubb=showflat&Number=83201&page=1#Post83201 ) You can get the output into a variable and then parse through it.

something like the following would output the "not after date" (not sure this is the expiry date or not), just remove the if/endif lines and it will display all the contents. (don't forget to paste the WSHPipe UDF to your script)


 Code:
$output=wshpipe("certutil -store",1)
for each $line in $output
  if instr($line,"NotAfter:") 
    ? $line
  endif
next

_________________________
(... better days ahead)