Already Pwned B0x w2012adm.ctf.hf.
Extract Remote Desktop Service Private certificate. The flag is lowercase sha1sum of the private key (between BEGIN CERTIFICATE and END CERTIFICATE)