Copy a certificate from one Azure key vault to another

CopyCertBetweenKeyVaults.ps1

$CertName = 'mycert'
$SrcVault = 'kv-cert-issuer-001'
$DstVault = 'kv-cert-consumer-001'
$secret = Get-AzKeyVaultSecret -VaultName $SrcVault -Name $CertName
$secretValueText = '';
$ssPtr = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($secret.SecretValue)
try {
    $secretValueText = [System.Runtime.InteropServices.Marshal]::PtrToStringBSTR($ssPtr)
}
finally {
    [System.Runtime.InteropServices.Marshal]::ZeroFreeBSTR($ssPtr)
}
$secretByte = [Convert]::FromBase64String($secretValueText)
$x509Cert = new-object System.Security.Cryptography.X509Certificates.X509Certificate2($secretByte, "", "Exportable,PersistKeySet")
Import-AzKeyVaultCertificate -VaultName $DstVault -Name $CertName -CertificateCollection $x509Cert