Hello all,

I developed a tool that scans for certificate issues in GPO, AD CS, and Active Directory. I couldn’t find another tool that consolidates these checks—PingCastle catches some, but not all—so I figured I’d try filling the gap.

Big shoutout to Locksmith! This isn’t intended as a clone (aside from maybe the ASCII art nod). That tool is incredibly helpful in securing AD CS. ADCT’s focus is more on certificate issues itself, as opposed to misconfigurations in certificate templates and such.

Would love your thoughts, feedback, or feature suggestions.