You can import certificates by using AD because on AD have Group Policy Object (GPO). it can deploy policy to client that join domain.
P.S. You can share and comment your knowledge for better thing
Follow my website: https://italkit-blog.blogspot.com/
Don't forget
Like,Share and Subscribe