|Managing Active Directory Certificates / Exporting the Active Directory SSL Certificate|
Learn the cerutil command for exporting certificates.
To export a CA certificate from the Active Directory server, you can use the certutil command-line utility:
certutil -ca.cert CACertFile
where CACertFile is the full path and filename of the CA certificate (for example, c:\certnew.cer).