单项选择题

A.From the ca, run the Get-PfxCertificate cmdlet.
B.From the Web server, run the Get-PfxCertificate cmdlet.
C.From the ca, run the certutil.exe tool and specify the -exportpfx parameter.
D.From the Web server, run the certutil.exe tool and specify the -exportpfx parameter.