Master Key certificates
Master Key certificate overview
If Active Directory is accessed via Masterkey mode, a certificate will be created. This has the name
Active Directory: Domain:

note
The Master Key certificate can't be replaced by your own certificate.
note
The certificates for Master Key mode have an expiry date. However, this isn't checked. The certificate thus doesn't need to be renewed.
warning
If the database is being moved to another server, it is essential that the Master Key certificate is also transferred.
Exporting and importing the certificate
The section certificates explains how to back up the certificate and link it again.