Updates

Author: msmbaldwin

articles/key-vault/certificates/how-to-export-certificate.md

@@ -79,25 +79,23 @@ For more information, see [parameter definitions](/cli/azure/keyvault/secret#az-
 Use this command in Azure PowerShell to get the certificate named **TestCert01** from the key vault named **ContosoKV01**. To download the certificate as a PFX file, run following command. These commands access **SecretId**, and then save the content as a PFX file.
 
 ```azurepowershell
-$cert = Get-AzKeyVaultCertificate -VaultName "ContosoKV01" -Name "TestCert01"
-$secret = Get-AzKeyVaultSecret -VaultName "ContosoKV01" -Name $cert.Name
-$secretValueText = '';
-$ssPtr = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($secret.SecretValue)
-try {
-    $secretValueText = [System.Runtime.InteropServices.Marshal]::PtrToStringBSTR($ssPtr)
-} finally {
-    [System.Runtime.InteropServices.Marshal]::ZeroFreeBSTR($ssPtr)
-}
-$secretByte = [Convert]::FromBase64String($secretValueText)
-$x509Cert = new-object System.Security.Cryptography.X509Certificates.X509Certificate2($secretByte,'','Exportable,PersistKeySet')
-$type = [System.Security.Cryptography.X509Certificates.X509ContentType]::Pfx
-$pfxFileByte = $x509Cert.Export($type, $password)
+$vaultName = '<YourVault>'
+$certificateName = '<YourCert>'
+$password = '<YourPwd>'
+
+$pfxSecret = Get-AzKeyVaultSecret -VaultName $vaultName -Name $certificateName -AsPlainText
+$secretByte = [Convert]::FromBase64String($pfxSecret)
+$x509Cert = New-Object Security.Cryptography.X509Certificates.X509Certificate2
+$x509Cert.Import($secretByte, $null, [Security.Cryptography.X509Certificates.X509KeyStorageFlags]::Exportable)
+$pfxFileByte = $x509Cert.Export([Security.Cryptography.X509Certificates.X509ContentType]::Pkcs12, $password)
 
 # Write to a file
-[System.IO.File]::WriteAllBytes("KeyVault.pfx", $pfxFileByte)
+[IO.File]::WriteAllBytes("KeyVaultcertificate.pfx", $pfxFileByte)
+
 ```
 
 This command exports the entire chain of certificates with private key (i.e. the same as it was imported). The certificate is password protected.
+
 For more information on the **Get-AzKeyVaultCertificate** command and parameters, see [Get-AzKeyVaultCertificate - Example 2](/powershell/module/az.keyvault/Get-AzKeyVaultCertificate).
 
 # [Portal](#tab/azure-portal)