its here, took me a while to track it down.

ccmcertfix


Usage is pretty easy, run as an administrator on the local machine you want to fix.

To deploy to the network I use psexec and do the following.

psexec -u domain\administrator -p passwordofadmin \\* \\someserver\path\to\ccmcerfix.exe

note that the \\* will do all computers on the network.