I need to import CRL files to a Bastion server that is not part of my environments domain. The CRL files are updated every few days so a new copy needs to be imported to the local cert store on the Bastion frequently.
I noticed when I do a fresh import of a new CRL old copies are not overwritten or deleted, a new copy is just added to the list. I'd like to run a script that will first delete the old CRL files in the Trusted Root CA and Intermediate CA CRLs store.
I haven't found a method to delete outdated/expired CRLs using certmgr, certutil or powershell. I need a way to script this so its automated. Has anybody found a way to do this? Any help would be appreciated!