ESC7

Vulnerable Certificate Authority Access Control where 2 sets of permissions poses security risks.

Enumerate

PS /home/bobbuilder> Get-CertificationAuthority -ComputerName dc.domain.local | Get-CertificationAuthorityAcl | select -expand Access