certipy-ad Category Certificates Enumerate AD CS vulnerable Servers & Templates bashWrapCopycertipy-ad find -u 'bbrown' -p '12345678' -dc-ip $IP \ -vulnerable -stdout