> For the complete documentation index, see [llms.txt](https://docs.patchmypc.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.patchmypc.com/patch-my-pc-publisher/manage/wsus-updates-tab/wsus-options/certificate-management/manage-certificates/show.md).

# Show Certificate in Patch My PC Publisher

*Applies to: Patch My PC Publisher V3.x*

The **Show Certificate** option in Patch My PC (PMPC) Publisher displays detailed information about the code-signing certificate currently configured for use by Publisher.

This view allows you to verify that a valid certificate is selected, confirm its trust status, and ensure it meets the signing requirements of Microsoft WSUS and ConfigMgr.

To show a certificate:

1. Load Publisher.
2. On the **General** tab, under the **Certificate Management** section, click the **Show Certificate** button.\
   \
   The **Certificate Information** screen is shown, displaying the information in the table below.

<figure><img src="/files/dx2RZ13JS9BzxtHcSq8Y" alt="&#x27;Certificate Information&#x27; screen" width="404"><figcaption></figcaption></figure>

<table><thead><tr><th width="196" valign="top">Field</th><th valign="top">Description</th></tr></thead><tbody><tr><td valign="top">Issuer</td><td valign="top">The authority that issued the certificate. This may be ConfigMgr, Publisher, or an internal/public Certificate Authority.</td></tr><tr><td valign="top">Subject</td><td valign="top">The identity the certificate was issued to.</td></tr><tr><td valign="top">Effective Date</td><td valign="top">The date and time from which the certificate is valid.</td></tr><tr><td valign="top">Expiration Date</td><td valign="top">The date and time the certificate expires.</td></tr><tr><td valign="top">Cert Usage</td><td valign="top">Indicates whether the certificate is valid for code-signing operations, which is required for publishing updates to WSUS and signing ConfigMgr detection method scripts.</td></tr><tr><td valign="top">Public Key</td><td valign="top">The cryptographic algorithm and key length used by the certificate (for example, RSA 2048-bit).</td></tr><tr><td valign="top">Thumbprint</td><td valign="top">A unique identifier for the certificate, useful for verification and troubleshooting.</td></tr><tr><td valign="top">Trusted Publisher</td><td valign="top">Confirms whether the certificate is trusted for publishing updates to WSUS.</td></tr><tr><td valign="top">Trusted Root Authority</td><td valign="top">Indicates whether the certificate chain is trusted by the local system and WSUS.</td></tr><tr><td valign="top">Self Signed</td><td valign="top">Indicates this is a self-signed certificate.</td></tr></tbody></table>

## Validate Trust Chain

Clicking **Validate Trust Chain** checks whether the certificate and its chain of trust are trusted by the local system.

<figure><img src="/files/hypWYk6bLPqKi6ARR7jN" alt="Clicking &#x27;Validate Trust Chain&#x27;" width="404"><figcaption></figcaption></figure>

This is a useful troubleshooting step if the publishing of updates fails due to certificate or trust-related errors.

<figure><img src="/files/PAkjwxNMz2KOHNX1PEPl" alt="Validate the certificate trust chain" width="300"><figcaption></figcaption></figure>

## Troubleshooting Certificates

If you receive an error when you click **Show Certificate**, use the steps in this section to identify the cause.

### No Certificate found in the WSUS Store on this Server

<figure><img src="/files/Yl66WQEU7FfI5SxzNZRe" alt="No Certificate foundin the WSUS Store on this Server" width="358"><figcaption></figcaption></figure>

If clicking **Show Certificate** displays **No certificate found in the WSUS store on this server**, review **PatchMyPC.log** for related certificate extraction errors. An entry such as

`An error occurred while extracting the certificate from WSUS: C:\WINDOWS\SystemTemp\PMP-1d2xluld\jwpcs1ov.tmp : The request failed with HTTP status 503: Service Unavailable. CertManager 18/04/2026 12:12:54 34 (0x0022)`\
`Failed to extract the certificate from WSUS CertManager 18/04/2026 12:12:54 34 (0x0022)`

Verify that the WSUS Application Pool is started in IIS, then retry the action.

<figure><img src="/files/OUGQ5pVKByZdahHqeGMI" alt="Verify that the WSUS Application Pool is started in IIS, then retry the action." width="563"><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.patchmypc.com/patch-my-pc-publisher/manage/wsus-updates-tab/wsus-options/certificate-management/manage-certificates/show.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.