When working with certificates in larger or unfamiliar environments it is likely you will need to access the certification authority (CA) server.
The command below can be run to quickly identity any authorised certification authority servers that are available in your organisation including any that you may not be aware that exist.
Run the following command from powershell or command line,
certutil -config - -ping
If a certification authority is found, the following pop up will appear showing the CA and the server it resides on, for example
If no server is available it will return the following stating that no active certification authorities are found,