How to recover a certificate from a broken (offline) Windows box

Our saviour is kabutor and his RecoverOfflineCertificate

• Boot you machine with ubuntu live usb
• In /etc/apt/sources.list add multiverse universe to every line

• sudo apt update

• sudo apt install python3-pip git

• python3 -m pip install pyOpenSSL dpapick3

• git clone https://github.com/kabutor/RecoverOfflineCertificate.git

• cd RecoverOfflineCertificate

• python3 ./pkcs12_dpapi_export.py -u /path/to/windows/user/folder --password WindowsUserPassword

Now in folder with RecoverOfflineCertificate you will get .pfx file(s), protected with default password 12345

In case of unforeseen consequences you can use fork located at https://github.com/Ford-RT/RecoverOfflineCertificate