$certs = Get-ChildItem Cert:\LocalMachine\My
foreach ($cert in $certs) {
$sidExtension = $cert.Extensions | Where-Object { $_.Oid.Value -eq "1.3.6.1.4.1.311.25.2" }
[PSCustomObject]@{
Thumbprint = $cert.Thumbprint
Subject = $cert.Subject
HasStrongSID = [bool]$sidExtension
}
}