I am getting a message that our splunk certificate is expired when I scan our systems. However, I cannot find the certicate anywhere in Windows Certificates. I also searched C:\Program Files\Splunk\etc\auth\mycerts and it is empy also the config in Checked \Splunk\etc\system\local and the webconfig doesnt have anything about a cert in there. How can I find this cert and where is it coming from? It's on our web port.
It could be in the default location as well
Try the command and should give you some pointers
splunk btool web list --debug|findstr cert
Or in details
splunk btool web list settings