Gets computers that have a certificate matching a thumbprint

Get-ComputersWithCertificate.ps1

$thumbprintsToSearchFor = @(
    "aabbccddeeffgg"
    )

$OUs = @(
    "OU=Servers,DC=contoso,DC=com",
    "OU=OtherServers,DC=contoso,DC=com"
    )

$logonHistoryDays = 90


foreach ($OU in $OUs) {

    $servers = Get-ADComputer -SearchBase $OU -Properties LastLogonDate -Filter *
    $servers = $servers | Where {$_.LastLogonDate -gt ((Get-Date).AddDays(-$logonHistoryDays))}

    foreach ($s in $servers) {

        try {
            $CertStore = New-Object System.Security.Cryptography.X509Certificates.X509Store "\\$($s.name)\My","LocalMachine"
            $CertStore.Open([System.Security.Cryptography.X509Certificates.OpenFlags]::ReadOnly)
            foreach($Cert in $CertStore.Certificates){
                if ($thumbprintsToSearchFor -contains $cert.thumbprint) {
                    "$($s.name) has $($cert.Thumbprint)"
                }
            }
            $CertStore.Close()
        } catch {
            "Failed: $($s.name)"
        }
    }
}