Off the network is easy, you just download the file from the site, follow the prompts, but when it asks about the location of the certificate, selected trusted root certificate authority.
Once you take it off the domain i assume i then doesnt pick up the certificates at logon.