I don't remember where I found this query, it lists everyone with permissons to certificates and keys in a database.

--Current assigned permissions

SELECT dp.*, su.*

...

Did you get an answer to your problem? We got the same error last night using a linked server. We are looking at increasing the remote_query_timeout setting in...