Using the Certutil Utility to Export a CA Certificate

To export a CA certificate from the Active Directory server, you can use the certutil command-line utility:

certutil -ca.cert CACertFile

where CACertFile is the full path and filename of the CA certificate (for example, c:\certnew.cer).