As per:
http://blogs.technet.com/b/askds/archive/2010/08/31/the-case-of-the-enormous-ca-database.aspx
For example, if you want to delete all failed and pending requests submitted by the 19/December/2012, the command is:
certutil -deleterow 12/19/2012 Request
