How to download certificates from AD?

Hello,
Someone can help me with download email certificates from AD?
I need to configure encrypted messages (SMIME)

On a Windows computer, open the Microsoft Management Console (MMC).
Add the Certificates snap-in for the Current User or Local Computer account.
Navigate to Personal > Certificates.
Right-click and select All Tasks > Request New Certificate.
Follow the Certificate Enrollment wizard to request a new certificate.

If its an email S/MIME certificate that you’ve got in Outlook, then this might help.

To download email certificates from Active Directory for configuring encrypted messages (S/MIME), you’ll typically enroll for a user certificate through the Active Directory Certificate Services (AD CS) management console. After completing enrollment, export the certificate in a compatible format like .pfx or .p12. Then, install the certificate on your local machine and configure your email client to use it for encryption. Finally, test encryption by sending a test email to ensure proper functionality. Be mindful of specific steps and permissions required in your environment, as they may vary.

You can use tools like PowerShell to extract and manage certificates. Use the 'Get-AdUser` cmdlet to retrieve user information, including certificates. Also make sure proper permissions are set for certificate access. Then, use the certificates for SMIME configuration in your email client.