Google Postini Directory Sync Configuration Guide - Manual (Page 31)

Microsoft Active Directory 31
2. Click Check on a pending cert.
3. Click on the saved certificate on the screen.
4. Click Download Certificate and save the certificate. Note the location where
you save the certificate. Select Base-64 encoded.