Certify is a monolithic C# CLI tool for enumerating and attacking misconfigurations in Active Directory Certificate Services (AD CS). It provides over a dozen verbs covering discovery (enum-cas, enum-templates, enum-pkiobjects), certificate request (request, request-agent, request-download, request-renew), certificate forging (forge), and CA/template management (manage-ca, manage-template, manage-self). The architecture is a single .NET 4.7.2 console application using CommandLineParser for argument handling and COM interop (CERTENROLLLib, ICertAdminD2) for enrollment and CA administration. It queries Active Directory via LDAP (System.DirectoryServices) and uses BouncyCastle for cryptographic operations. The codebase is well-structured, with clear separation of concerns into commands, domain models, libraries, and utilities, and demonstrates deep knowledge of Windows PKI internals, including DCOM communication, remote registry access, and certificate chain manipulation.