If you ever want to query AD for Certification Authorities, skip ADSI Edit… there’s a quick way to do it using certutil. Here’s how:
certutil -config – -ping
Note the extra empty dash between -config and -ping is needed to query the list of CAs.
Credit for the useful command goes to colleague and UC ninja Jeff Carlson.