Here’s a useful tip to find which server is holding a Microsoft Certificate Authority within your Active Directory domain.
I was looking for a quick solution in order to know how many servers were a CA in the domain (at work).
Simply issue the command below in a DOS command prompt on one of your server
C:\> certutil -find - -ping
This will display a popup (see below) with all trusted CA in your domain
Hope you’ll enjoy it