I would like to retire one of my primary servers but need to confirm that it is not the internal CA. How can I confirm this? Also, where can I see the certificate on a managed device? Is it actually a crt file?