Cerutil is a very complex tool and only careful review of all its options allows us to comprehend its rich functionality. Lots of its command line arguments are described online all over the place and as such, what I present below is not new. However, AFAICT it has not been covered in a context of lolbining and as such, perhaps deserves some attention.

Project LOLBAS describes at least two ways of downloading files via certutil. Here is the third one:

certutil -URL https://www.google.com

This will launch a GUI window for a program called URL Retrieval Tool:

Once you hit Retrieve button you will get the ‘Failed’ status, but… the file that URL points to will be now downloaded into %APPDATA%\..\LocalLow\Microsoft\CryptnetUrlCache\Content\<hash> file (thx to @OsandaMalith for pointing out a mistake in the path).