Use the following command line to find the certificate servers. This is one of the most overlooked items in auditing.
certutil -config - -ping- https://support.microsoft.com/en-us/help/555529
Windows Certificate of Authority
Reading Time: < 1 minute
