Expired certificate in CDP

Question

Hi Guys,

I got this error i already tried to publish a new CRL from the offline root CA and place it in C:\inetpub\wwwroot\CertData folder in my issuing CA, but it appears that the one expired in my CDP location is the certificate of my sub CA how do i fix?

Answer 1

Hi,

If it is the CDP in the issue CA was expired ,
Open the Issue CA consol ,right click the Revoked Certificates and select Publish CRL.

Then check if the new CRLs are changed in the following location C:\Windows\system32\CertSrv\CertEnroll on the CA:

Then check if the new CRLs are changed in the following location C:\Windows\CertEnroll on the web server:

Check if the CRL was changed in ad by the ADSI:

Best Regards,