Right-click → All Tasks → Export → DER or Base-64 – useful for deploying to non-Windows devices or offline systems.
The Microsoft Root CA 2011 serves as the "trust anchor" for a Public Key Infrastructure (PKI) hierarchy: Microsoft Learn Microsoft Root Certificate 2011.cer microsoft root certificate authority 2011cer work
When an application (browser, Windows Update, Office) encounters a certificate signed by an intermediate chaining up to Microsoft Root CA 2011 , it performs path validation: Right-click → All Tasks → Export → DER