Export SSL certificate (.pem and .key) from instance?

[Nisar3]

Our SIT instance makes outbound calls via a Rest Message that are MASSL enabled. If I were to make those same calls via postman, would it be possible to export the certificates from the instance (since they are already there and are allowing successful calls to the target endpoints)?

I combed through the x.509 Certificates table but there are so many of them, so unsure which one the Rest Message is using and how to export them.

[Nisar3]

My assumption would be to go the sys_protocol_profile table and select the "Mutual authentication profile" used by the Rest Message and download the files from there. But this gets me only the keystore. Where would the .pem file be then?

[Nisar3]

On second thoughts, if I raise a HI ticket, can ServiceNow support extract and give it to me?