After you’ve completed the creation of a supervision identity, the next step is to export the supervision certificate files for the identity, from the Apple Configurator application.
Click the “Cog” button to reveal the Export options, choose ”Export Supervision Identity...” and a save sheet will appear over the Organizations window.
Enter a name for the certificates and choose a location for the exported files. Set the Format to “Unencrypted DER (.crt and .key, for Automator and cfgutil)"