- Open IIS Manager
- Right click "Default Web Site", select Properties
- Open the "Directory Security" tab
- Click "View Certificate"
- Open the "Details" tab
- Click "Copy to File"
- When prompted, do not export the private key
- You'll be asked which format to use, select "DER encoded binary X.509 (.CER)" - it should be selected by default
