# Show Certificate

*Applies to: Patch My PC Publisher*

## Overview

The Show Certificate option displays detailed information about the code-signing certificate currently configured for use by the Publisher. This view allows you to verify that a valid certificate is selected, confirm its trust status, and ensure it meets WSUS and ConfigMgr signing requirements.

<figure><img src="https://3773699522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX7dvS0r_4fc0AikgJS%2Fuploads%2Flg7xvaQaCFoBRFmyZghj%2Fimage.png?alt=media&#x26;token=175e2fb4-bc90-4b52-b31c-10f4f1900b4c" alt="Show the Certificate being used by the Publisher" width="563"><figcaption></figcaption></figure>

When you select **Show Certificate**, the following information is displayed:

* **Issuer**\
  The authority that issued the certificate. This may be ConfigMgr, the Publisher, or an internal/public Certificate Authority.
* **Subject**\
  The identity the certificate was issued to.
* **Effective Date**\
  The date and time from which the certificate is valid.
* **Expiration Date**\
  The date and time the certificate expires.
* **Code Signing**\
  Indicates whether the certificate is valid for code-signing operations, which is required for publishing updates to WSUS and signing ConfigMgr detection method scripts.
* **Public Key**\
  The cryptographic algorithm and key length used by the certificate (for example, RSA 2048-bit).
* **Thumbprint**\
  A unique identifier for the certificate, useful for verification and troubleshooting.
* **WSUS certificate installed in the Trusted Publishers certificate store**\
  Confirms whether the certificate is trusted for publishing updates to WSUS.
* **WSUS certificate installed in the Trusted Root certificate store**\
  Indicates whether the certificate chain is trusted by the local system and WSUS.

## Validate Trust Chain

Selecting **Validate Trust Chain** checks whether the certificate and its issuing chain are trusted by the local system. This is a useful troubleshooting step if update publishing fails due to certificate or trust-related errors.

<figure><img src="https://3773699522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX7dvS0r_4fc0AikgJS%2Fuploads%2FjfsSbZNKQvMOSyL4AhQr%2Fimage.png?alt=media&#x26;token=d1f94254-a5f0-4a5c-9682-4f4f227d5dfa" alt="Validate the certificate trust chain" width="300"><figcaption></figcaption></figure>

## Troubleshooting

If you receive an error when you click **Show Certificate**, use the troubleshooting steps in this section to identify the cause.

### No Certificate foundin the WSUS Store on this Server

<figure><img src="https://3773699522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX7dvS0r_4fc0AikgJS%2Fuploads%2FqW1XcH5Wkb6Gh5vXb4I9%2Fimage.png?alt=media&#x26;token=87104370-7ff1-4915-ac69-bb17b3e3ab0e" alt="No Certificate foundin the WSUS Store on this Server" width="358"><figcaption></figcaption></figure>

If clicking **Show Certificate** displays **No certificate found in the WSUS store on this server**, review **PatchMyPC.log** for related certificate extraction errors. An entry such as

`An error occurred while extracting the certificate from WSUS: C:\WINDOWS\SystemTemp\PMP-1d2xluld\jwpcs1ov.tmp : The request failed with HTTP status 503: Service Unavailable. CertManager 18/04/2026 12:12:54 34 (0x0022)`
\
`Failed to extract the certificate from WSUS CertManager 18/04/2026 12:12:54 34 (0x0022)`

Verify that the WSUS Application Pool is started in IIS, then retry the action.

<figure><img src="https://3773699522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX7dvS0r_4fc0AikgJS%2Fuploads%2FGKvSbhyheDoXKjv8w9ow%2Fimage.png?alt=media&#x26;token=1ed50b28-4f6c-49cf-861f-6c4094490ea6" alt="Verify that the WSUS Application Pool is started in IIS, then retry the action." width="563"><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.patchmypc.com/patch-my-pc-publisher/administration/general/certificate-management/show-certificate.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.