Any certificate required outside of the Windows PC must be first saved in the Certificate store then exported. If the certificate is to be used for identity checking (that is, to check the far entity of a link) the certificate alone is sufficient, and should be saved in PEM or DER format.

If the certificate is to be used for identification (that is, to identify the near end of a link) the certificate and private key is required, and should be saved in PKCS#12 format, along with a 'strong' password to access the resultant .pfx file.