openssl.exe s_client -connect DomainController:636 > Filename.cer

Run this on your local system.

Update: 13-11-2025

openssl s_client -showcerts -connect DomainController:636 | openssl x509 -outform PEM > Filename.cer