If you are using a self-signed SSL certificate for your DualShield server, then you can download its CA certificate.
Navigate to "SSO | SSO Servers"
Click the context menu of the Single Sign-on server and select "Download CA Certificate"
Overview
Content Tools