---

$cert = Get-ChildItem Cert:\LocalMachine\My |
    Where-Object { $_.Subject -like "*rdp.ex.fo*" } |
    Sort-Object NotAfter -Descending | Select-Object -First 1

"Thumbprint:  $($cert.Thumbprint)"
"NotAfter:    $($cert.NotAfter)"
"HasPrivateKey: $($cert.HasPrivateKey)"

# что привязано к слушателю
$bound = (Get-ItemProperty "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp").SSLCertificateSHA1Hash
"Bound:       $(($bound | ForEach-Object { $_.ToString('X2') }) -join '')"

# свежие ошибки Schannel
Get-WinEvent -LogName System -MaxEvents 10 |
    Where-Object { $_.Id -eq 36870 } |
    Select-Object TimeCreated -First 3