What command should you run next?

HOTSPOT
You have a hybrid Exchange Server 2016 organization.
Users use Outlook on the web. All mailboxes currently reside on-premises.
You have an internal public key infrastructure (PKI) that uses a certification authority (CA) named CA1.
Certificates are issued to users to sign and encrypted email messages.
You move a mailbox to Exchange Online and you discover that the mailbox fails to exchange signed or
encrypted email messages from the on-premises mailbox users.
You need to ensure that all of the mailboxes that were moved to Exchange Online can send encrypted email
messages to the on-premises mailboxes. The mailboxes must also be able to receive encrypted email
messages from the on-premises mailboxes.
You export the required certificates to a file named Export.sst.
What command should you run next? To answer, select appropriate options in the answer area.
Hot Area:

Answer:

Explanation:
http://blogs.technet.com/b/exchange/archive/2014/12/15/how-to-configure-s-mime-in-office-365.aspx