Relevance to find machine certs that have no registry entry

Hello,

I’m looking for some way to find machine certs on workstations that don’t appear to have a registry setting. Trying to determine if our workstations have a sha1 or sha2 machine cert.

Any suggestions?

How would you find these on the command line? If you can provide an example we can help you code it in BigFix.