From 97be78a1070027c7f364eec4deef490c14046f90 Mon Sep 17 00:00:00 2001
From: Carlos Monastyrski <charly.monastyrski@gmail.com>
Date: Thu, 28 Aug 2025 15:54:16 -0300
Subject: [PATCH] Doc improvement

---
 .../integrations/app-connections/azure-adcs.mdx | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/docs/integrations/app-connections/azure-adcs.mdx b/docs/integrations/app-connections/azure-adcs.mdx
index 0690304c6..7bc174135 100644
--- a/docs/integrations/app-connections/azure-adcs.mdx
+++ b/docs/integrations/app-connections/azure-adcs.mdx
@@ -35,12 +35,27 @@ Connect Infisical to Microsoft Active Directory Certificate Services (ADCS) for
     - **Reject Unauthorized**: Whether to reject connections with invalid SSL certificates (it's recommended to keep it enabled)
     
     <Note>
-    **Getting the SSL Certificate**: If your ADCS server uses a self-signed certificate or a certificate from a custom CA, you can obtain the certificate using OpenSSL:
+    **Getting the SSL Certificate**: If your ADCS server uses a self-signed certificate or a certificate from a custom CA, you can obtain the certificate using OpenSSL or PowerShell:
     
+    **Using OpenSSL:**
     ```bash
     openssl s_client -connect your-adcs-server:443 -showcerts
     ```
     
+    **Using PowerShell (from inside your ADCS Server):**
+    ```powershell
+    Import-Module WebAdministration -ErrorAction SilentlyContinue
+    $binding = Get-WebBinding -Protocol https -Port 443
+    if ($binding -and $binding.certificateHash) {
+        $cert = Get-ChildItem -Path "Cert:\LocalMachine\My\$($binding.certificateHash)"
+        if ($cert) {
+            $certBase64 = [System.Convert]::ToBase64String($cert.RawData)
+            $certPem = "-----BEGIN CERTIFICATE-----`n" + ($certBase64 -replace '(.{64})', '$1`n') + "`n-----END CERTIFICATE-----"
+            Write-Output $certPem
+        }
+    }
+    ```
+    
     Copy the certificate content (including `-----BEGIN CERTIFICATE-----` and `-----END CERTIFICATE-----` lines) and paste it into the SSL Certificate field.
     </Note>