To Retrieve an Active Directory Certificate Using the certutil program

1. Run the following command from the Active Directory machine to export the certificate.

   C:\>certutil -ca.cert cacert.bin

2. You can then import thecacert.bin file into a certificate database.