ordex
are you talking about the private key? because certificates are public by design. One way is to bundle them in an encrypted PKCS#12 file. That is the standard. You can ask your PKI admin to provide you one or you can create it with the openssl command line tool.