Hello 49885604,
Thank you for posting in Q&A forum.
If the CRL on root CA expired, you should update and publish it to domain manually.
Here is a similar thread for your reference.
I hope the information above is helpful.
If you have any questions or concerns, please feel free to let us know.
Best Regards,
Daisy Zhou
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.