Some knowlege from the top of my head

My personal blog

  1. Pretty list of certificate authorities that AD trusts for auth