Windows: Locate the CA in your Active Directory Infrastructure
there are two ways to determine the Certitification Authority in your Active Directory environment.
1. All Servers are member of the Active Directory local group “Cert Publishers”
C:\> net localgroup "Cert Publishers" /domain CAServer1$ CAServer2$ 2. Use certutil to get a list of servers and ping them if they are alive. certutil –config - -ping