CERTUTIL doesn't seem to handle double-quotes in a password

[Guest Graeme Williams1]

I'm having an issue with CERTUTIL. I can't find a way to escape the double-quote character. I have a PFX file with the password 'Pass"word' (no single-quotes.) The following command produces this output:C:\Logs>CERTUTIL -f -p Pass"word -importpfx 1.pfx Entry 0: [edited] Entry 1: [edited] CertUtil: -dump command completed successfully. It looks like if CERTUTIL cannot parse the command line it just does a dump.Everything I do to escape the quotes produces this output, apart from using double double-quotes, as in: C:\Logs>CERTUTIL -f -p Pass""word -importpfx 1.pfx CertUtil: -impo

 

More...