Exporting an Encryption Certificate for the WS Provider AS ABAP 
For the WS consumer to be able to send encrypted messages to the WS provider, it requires the public key of the WS provider to encrypt the messages. The public key of the WS provider is contained in its public key certificate.
The option Asymmetric Message Signature & Encryption is selected for the WS provider (for example, in the SOA Manager).
Use the Trust Manager to export the public key certificate of the WS provider from the WS-Security PSE WS Security Keys to a file.
More information: Maintaining PSEs and Administering Certificates