Question: how to check domain controller certificate?
Answer: Log in to the AD domain controller. Use an administrator account.
Open the MMC.
Look for Certificates (Local Computer) under Console Root. If no certificate is displayed, add it as follows: ... 
Expand Certificates (Local Computer).
Expand Enterprise Trust.
Select Certificates.