This will let you find any and all certificates created via particular CA's. Best used when looking for certs issues by old expired CA vs New CA. i.e top level 10 year CA expired - quickly find certs issues by that CA..
Script allows you to find where the users account was locked out from allowing you to unlock the users account and let them check the server