Identify the active Remote Desktop (RDP) certificate
If you have configured a certificate template for Remote Desktop certificates and an appropriate Group Policy , or manually assigned a Remote Desktop certificate , you may want to verify that the certificates on the participating computers are being used correctly by the Remote Desktop session host.
Implementation
Do you know TameMyCerts? TameMyCerts is an add-on for the Microsoft certification authority (Active Directory Certificate Services). It extends the function of the certification authority and enables the application of rule sets to realize the secure automation of certificate issuance. TameMyCerts is unique in the Microsoft ecosystem, has already proven itself in countless companies around the world and is available under a free license. It can be downloaded via GitHub and used free of charge. Professional maintenance is also offered.
Unfortunately, there is no graphical user interface to achieve this. However, it is possible to query against the Windows Management Instrumentation (WMI) via Windows PowerShell to get the desired information. This can be achieved with the following command.
(Get-WmiObject `
-class "Win32_TSGeneralSetting" `
-Namespace root\cimv2\terminalservices `
-Filter "TerminalName='RDP-tcp'"
).SSLCertificateSHA1Hash 
The SHA1 fingerprint (thumbprint) of the Remote Desktop certificate in use is returned. With this information, the certificate in use can be easily identified. The fingerprint is displayed in the certificate dialog in the "Details" tab in the "Thumbprint" field.
