From Bright Pattern Documentation
Export Metadata
Follow these steps to get the certificate for your ForgeRock instance.
Step 1
Go to the following page:
http://<FQDN>:8080/openam/saml2/jsp/exportmetadata.jsp?entityid=http://<FQDN>:8080/openam&realm=/
Step 2
Copy "ds:X509Certificate" content to Notepad++.
Step 3
In the certificate, before content begins, insert the following:
"-----BEGIN CERTIFICATE-----"
At the end of the content, insert the following:
"-----END CERTIFICATE----- "