In ConsoleOne, access the properties for the SSL Certificate object you just configured.
Click Certificates > Trusted Root Certificate.
Click Export and save the file in binary DER format (filename is typically trustedrootcert.der).