Obtain a third-party certificate of authority (CA) for each Active Directory forest. The certificate requirements are described ...