Question: do domain controllers need certificates?
Answer: It also includes the public key which is required in order for web browsers to set up a secure encrypted connection with the server. Any domain controller that can be used as a logon server to assign domain privileges must have a domain controller certificate in order to facilitate smart card logon across the network.